ETSITS124 259V9.0.0 



(2010-01) 



Technical Specification 



Digital cellular telecommunications system (Phase 2+) 
Universal Mobile Telecommunications System (UMTS) 

LTE 
Personal Network Management (PNM) 

Stage 3 
(3GPP TS 24.259 version 9.0.0 Release 9) 



33i^ 





3GPP TS 24.259 version 9.0.0 Release 9 1 ETSI TS 1 24 259 V9.0.0 (201 0-01 ) 



Reference 



RTS/TSGC-01 24259V900 
Keywords 



GSM, LTE, UMTS 



ETSI 

650 Route des Lucioles 
F-06921 Sophia Antipolis Cedex - FRANCE 

Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 1 6 

Siret N ° 348 623 562 0001 7 - NAF 742 C 
Association a but non lucratif enregistree a la 
Sous-Prefecture de Grasse (06) N° 7803/88 



Important notice 



Individual copies of the present document can be downloaded from: 
http://www.etsi.orq 

The present document may be made available in more than one electronic version or in print. In any case of existing or 

perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). 

In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive 

within ETSI Secretariat. 

Users of the present document should be aware that the document may be subject to revision or change of status. 

Information on the current status of this and other ETSI documents is available at 

http://portal.etsi.org/tb/status/status.asp 

If you find errors in the present document, please send your comment to one of the following services: 

http://portal.etsi.orq/chaircor/ETSI support.asp 

Copyright Notification 

No part may be reproduced except as authorized by written permission. 
The copyright and the foregoing restriction extend to reproduction in all media. 

© European Telecommunications Standards Institute 2010. 
All rights reserved. 

DECT™, PLUGTESTS™, UMTS™, TIPHON™, the TIPHON logo and the ETSI logo are Trade Marks of ETSI registered 

for the benefit of its Members. 
3GPP™ is a Trade Mark of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. 

LTE™ is a Trade Mark of ETSI currently being registered 

for the benefit of its Members and of the 3GPP Organizational Partners. 

GSM® and the GSM logo are Trade Marks registered and owned by the GSM Association. 



ETSI 



3GPP TS 24.259 version 9.0.0 Release 9 2 ETSI TS 1 24 259 V9.0.0 (201 0-01 ) 



Intellectual Property Rights 



IPRs essential or potentially essential to the present document may have been declared to ETSI. The information 
pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found 
in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in 
respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web 
server ( http://webapp.etsi.org/IPR/home.asp ). 

Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee 
can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web 
server) which are, or may be, or may become, essential to the present document. 



Foreword 

This Technical Specification (TS) has been produced by ETSI 3rd Generation Partnership Project (3GPP). 

The present document may refer to technical specifications or reports using their 3GPP identities, UMTS identities or 
GSM identities. These should be interpreted as being references to the corresponding ETSI deliverables. 

The cross reference between GSM, UMTS, 3GPP and ETSI identities can be found under 
http://webapp.etsi.org/kev/quervform.asp . 



ETSI 



3GPP TS 24.259 version 9.0.0 Release 9 3 ETSI TS 1 24 259 V9.0.0 (201 0-01 ) 



Contents 



Intellectual Property Rights 2 

Foreword 2 

Foreword 5 

1 Scope 6 

2 References 6 

3 Definitions, symbols and abbreviations 7 

3.1 Definitions 7 

3.2 Abbreviations 7 

4 Overview of personal network management 9 

4.1 General 9 

4.2 Network capabilities 9 

5 Functional entities 9 

5.1 Introduction 9 

5.2 User Equipment (UE) 9 

5.3 Application Server (AS) 10 

5.4 Authentication Proxy 10 

6 Roles for PN-registration 10 

6.1 Introduction 10 

6.2 PNUE 10 

6.3 PNM Application 10 

6.3.1 PN-registration procedure in the IM CN subsystem 10 

6.3.2 PN-registration procedure in the CS domain 11 

7 Roles for PN-configuration 11 

7.1 Introduction 11 

7.2 PNUE 11 

7.3 PNM application 13 

8 Roles for PN-query 13 

8.1 Introduction 13 

8.2 PNUE 13 

8.3 PNM application 14 

9 Roles for PN redirection 14 

9.1 Introduction 14 

9.2 PNUE 14 

9.3 PNM application 14 

9.3.1 PN UE redirection procedure in the IM CN subsystem 14 

9.3.2 PN UE redirection procedure in the CS domain 15 

10 Roles for PN access control 16 

10.1 Introduction 16 

10.2 PNUE 16 

10.3 PNM application 17 

10.3.1 PN access control procedure in the IM CN subsystem 17 

10.3.2 PN access control procedure in the CS domain 18 

10.4 PNM controller IMS application reference identifier 18 

11 Protocol at the Ut reference point 19 

11.1 Introduction 19 

11.2 Roles 19 

11.2.1 XCAP client 19 

11.2.2 XCAP server 19 



£75/ 



3GPP TS 24.259 version 9.0.0 Release 9 4 ETSI TS 1 24 259 V9.0.0 (201 0-01 ) 

Annex A (informative): Example signalling flows 20 

A.l Scope of signalling flows 20 

A.2 Introduction 20 

A.2.1 General 20 

A. 2. 2 Key required to interpret signalling flows 20 

A. 3 Signalling flows 22 

A. 3.1 Introduction 22 

A. 3. 2 Signalling flows for PN-registration 22 

A. 3. 2.1 PN-registration in the IM CN subsystem using third party registration 22 

A. 3. 2. 2 PN-registration in the IM CN subsystem with subscription to reg event package 25 

A. 3. 3 Signalling flows for PN-configuration 28 

A.3.3.1 PN-configuration for PN UE redirection 28 

A. 3. 3. 2 PN-configuration for PN access control 30 

A. 3. 3. 3 PN-configuration for changing PN UE name 31 

A.3.3.4 PN-query 33 

A.3.3.5 PN-deconfiguration 34 

A. 3.4 Signalling flows for PN UE redirection 36 

A.3.4.1 PN UE redirection in the IM CN subsystem 36 

A.3.4.2 PN UE redirection in the CS domain 43 

A. 3. 5 Signalling flows for PN access control 45 

A. 3. 5.1 PN access control procedure in IM CN subsystem 45 

A. 3. 5.2 PN access control procedure in CS domain 54 

A. 3. 6 Signalling flows for interdomain networking 56 

A.3.6.1 IM CN subsystem to CS domain 56 

A.3.6.2 CS domain to IM CN subsystem 59 

A.4 Example XML document 61 

A. 4.1 Introduction 61 

Annex B (normative): PNM XML schema definition 63 

B.l XML elements structure 63 

B.2 XML schema for PNM 65 

Annex C (normative): Definitions of the PNM XCAP application usage 68 

Annex D (informative): Change history 69 

History 71 



£75/ 



3GPP TS 24.259 version 9.0.0 Release 9 5 ETSI TS 1 24 259 V9.0.0 (201 0-01 ) 



Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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Scope 



Personal Network Management (PNM) is a home network-based application and provides the home network-based 
management of Personal Network (PN) consisting of multiple devices belonging to a single user, as described in 
3GPP TS 22.259 [2] and 3GPP TS 23.259 [15]. 

The present document provides the protocol details for enabling Personal Network management (PNM) services in the 
IP Multimedia (IM) Core Network (CN) subsystem based on the protocols of XML Configuration Access Protocol 
(XCAP), Session Initiation Protocol (SIP) and the Session Description Protocol (SDP). 

The present document provides the protocol details for enabling Personal Network management (PNM) services in 
Circuit Switched (CS) domain based on the protocols of CAP, MAP, ISUP, USSD and BICC. 

The present document is applicable to User Equipment (UEs) and Application Servers (AS) providing PNM 
capabilities. 

The present document makes no PNM specific enhancements to SIP, SIP events or SDP specified in 

3GPPTS 24.229 [3]. 

The present document makes no PNM specific enhancements to CAP, MAP, ISUP, USSD and BICC. 



References 
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document. 
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Release as the present document. 
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Protocol details". 
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Protocol (XCAP)." 
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[II] 3GPP TS 29.228: "IP Multimedia (IM) Subsystem Cx and Dx Interfaces; Signalling flows and 
message contents". 
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[13] 3GPP TS 29.078: "Customised Applications for Mobile network Enhanced Logic (CAMEL) 

Phase 3: CAMEL Application Part (CAP) specification". 

[14] 3GPP TS 24.090: "Unstructured Supplementary Service Data (USSD); Stage 3". 

[15] 3GPP TS 23.259: "Personal Network Management (PNM); Procedures and Information Flows; 

Stage 2". 

[16] IETF RFC 4244 (2005): "An Extension to the Session Initiation Protocol (SIP) for Request History 

Information" . 

[17] IETF RFC 4458 (2006): "Session Initiation Protocol (SIP) URIs for Applications such as 

Voicemail and Interactive Voice Response (IVR)". 
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3 Definitions, symbols and abbreviations 

3.1 Definitions 

For the purposes of the present document, the following terms and definitions given in IETF RFC 4825 [6] apply. 

Application usage 

Application Unique ID (AUID) 

Document Selector 

Document URI 

Naming Conventions 

Node Selector 

Node Selector Separator 

Node URI 

XCAP client 

XCAP resource 

XCAP root 

XCAP root URI 

XCAP server 

XCAP User IdentMer (XUI) 

For the purposes of the present document, the following terms and definitions given in 3GPP TS 22.085 [19] apply: 

Incoming Access (lA) 
Outgoing Access (OA) 

For the purposes of the present document, the following terms and definitions given in 3GPP TS 22.259 [2] apply: 

Personal Areal Network (PAN) 

Personal Network (PN)Personal Network Element (PNE) 

PNE Identifier 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 
ACM Address Complete Message 
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ANM Answer Message 

AS Application Server 

BICC Bearer Independent Call Control 

BSF Bootstrapping Server Function 

CAMEL Customised Applications for Mobile network Enhanced Logic 

CAP CAMEL Application Part 

CCCF Call Continuity Control Function 

CN Core Network 

CS Circuit Switched 

CUG Closed User Group 

FQDN Fully Qualified Domain Name 

GBA Generic Bootstrapping Architecture 

GMSC Gateway MSC 

GRUU Globally Routable User Agent URI 

GSM Global System for Mobile communications 

HLR Home Location Register 

HSS Home Subscriber Server 

HTTP Hypertext Transfer Protocol 

lA Incoming Access 

lAM Initial Address Message 

lARI IMS Application Reference Identifier 

ICSI IMS Communication Service Identifier 

IDP Initial Detection Point 

IE Information Element 

IFC Initial Filter Criteria 

IM IP Multimedia 

IMS IM CN subsystem 

IP Internet Protocol 

ISDN Integrated Services Digital Network 

ISUP ISDN User Part 

MAP Mobile Application Part 

MGCF Media Gateway Control Function 

MS Mobile Station 

MSC Mobile Switching Centre 

MSISDN MS international PSTN/ISDN number 

NAF Network Application Function 

OA Outgoing Access 

P-CSCF Proxy Call Session Control Function 

PN Personal Network 

PNE Personal Network Element 

PNM Personal Network Management 

PSI Pubhc Service Identity 

PSTN Public Switched Telephone Network 

S-CSCF Serving Call Session Control Function 

SDP Session Description Protocol 

SIP Session Initiation Protocol 

SRI Send Routing Information 

TLS Transport Layer Security 

UE User Equipment 

URI Uniform Resource Identifier 

USSD Unstructured Supplementary Service Data 

VLR Visitor Location Register 

XCAP XML Configuration Access Protocol 

XML Extensible Markup Language 
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4 Overview of personal network management 

4.1 General 

PNM applications consists of the PN redirection service including the FN UE redirection and PNE redirection, and the 
FN access control , both applying only to the terminating service, as described in 3GPP TS 22.259 [2] and 
3GPP TS 23.259 [15]. The PN redirection is a PNM application that enables redirecting a session addressed to any of 
the UEs belonging to the PN to a certain UE or a certain PNE of their PN, i.e., the default UE or default PNE for 
terminating services. The PN access control is a PNM application that enables users to exercise PN access control to 
restrict accesses to certain UEs or certain PNEs of their PN. The PN may consist of UEs which are only privately 
accessed, that is each UE may be accessed only by other UEs of the PN. The PN-User may additionally modify the 
access levels of each UE of the PN to be public or private. In this regard the PN behaves similar to a CUG as specified 
in 3GPP TS 22.085 [19] and 3GPP TS 23.085 [20], with Outgoing Access and whether Incoming Access is allowed for 
the PN UE is dependent on the PN access control list for that PN UE. 

In order to make the above happen, the following procedures are provided within this document: 

procedures for PN-registration are specified in clause 6; 

procedures for PN-configuration are specified in clause 7; 

procedures for PN-query are specified in clause 8; 

procedures for session redirection are specified in clause 9; and 

- procedures for restricting access to certain UEs are specified in clause 10. 

4.2 Network capabilities 

In order to support the PNM services the following network capabilities are assumed: 

1) provision by the home network operator of PNM specific AS on the IM CN subsystem, as specified in 

3GPPTS 24.229 [3]; 

2) support of CAMEL phase-3 and USSD as specified in 3GPP TS 29.078 [13] and 3GPP TS 24.090 [14]. 



5 Functional entities 

5.1 Introduction 

5.2 User Equipment (UE) 

To be compliant with this document, a UE shall implement the role of a PN UE (see subclause 6.2, subclause 7.2, 
subclause 8.2, subclause 9.2 and subclause 10.2). 

The UE shall implement the XCAP client role as described in subclause 11.2.1. 

The UE shall implement HTTP digest authentication (see 3GPP TS 24.109 [5]). 

The UE shall implement Transport Layer Security (TLS) (see IETF RFC 2246 [4]). 

The UE shall implement the GBA Function as described in 3GPP TS 33.220 [8]. 

The UE shall initiate a bootstrapping procedure with the bootstrapping server function (BSF) located in the home 
network, as described in 3GPP TS 24.109 [5]. 
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5.3 Application Server (AS) 

The AS implementing PNM application shall implement the role of a XCAP server (see subclause 11. 2. 2). 

The AS implementing PNM application shall implement the Network Application Function (NAF) as described in 
3GPPTS 33.220 [8]. 

NOTE: For terminating services, the PNM Application in IM CN subsystem is the first Application Server of any 
Application Servers in the path of the call. 

5.4 Authentication Proxy 

The generic requirements for an authentication proxy are defined in 3GPP TS 24.109 [5]. 



Roles for PN-registration 



6.1 Introduction 

The PN-registration is the procedure where a UE is added to the PN, or a PNE is added to the PAN. As a result of a 
successful registration, the UE capabilities are conveyed to the PNM application. 

6.2 PN UE 

If a PN UE supports the PN controller functionality and is configured to act as a PN controller the PN UE shall include 
in the Contact header of the REGISTER request containing g.3gpp.iari_ref feature tag containing the lARI value 
defined in subclause 10.4. 

Upon receiving a REGISTER request sent from PNE via the PAN internal interface, the PN UE shall initiate a SIP 
REGS ITER request containing the PNE identifier. 

Editor's Note: How to include the the PNE identifier into the SIP REGISTER request initiated by the UE is FFS. 

There are no PNM specific requirements for registration of the PN UE to the CS domain. 

6.3 PNM Application 

6.3.1 PN-registration procedure in the IM CN subsystem 

The PNM AS can be configured with any of various options for obtaining information from the IM CN subsystem 
specified in 3GPP TS 24.229 [3], 3GPP TS 29.328 [9] and 3GPP TS 29.329 [12], for example: 

a) receipt of REGISTER request which causes a third-party REGISTER request containing in the body the 
incoming REGISTER request from the PN UE and the 200 (OK) response to the incoming REGISTER request 
to be sent to the PNM application. The PNM application may then obtain information from the body of the third- 
party REGISTER request; 

b) receipt of REGISTER request which causes a third-party REGISTER request containing in the body a <service- 
info> element containing the private user identity of the PN UE to be sent to the PNM application. The PNM 
application may then subscribe to the reg event package for that user to obtain information; or 

c) receipt of REGISTER request which causes a third-party REGISTER request containing in the body a <service- 
info> element containing the private user identity of the PN UE to be sent to the PNM application. The PNM 
application may then use the Sh interface to obtain information. 

This document places no requirement on the use of all or any of these mechanisms. 
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After successful PN-registration, the PNM AS shall enrol the public user identity of the FN UE or the PNE identifier as 
registered in the data base. 

6.3.2 PN-registration procedure in tine CS domain 

When the gsmSCF (CAMEL service for PNM) receives a MAP_NOTE_MM_EVENT message sent from the VLR to 
report that the status of the UE set to "attached", the gsmSCF sets the UE registration status in the PN to "registered" 
and sends the UE status to the PNM AS. 

NOTE: The interface between the gsmSCF and the PNM AS is unspecified. 

When the gsmSCF (CAMEL service for PNM) receives a MAP_NOTE_MM_EVENT message sent from the VLR to 
report that the status of the UE set to "detached", the gsmSCF sets the UE registration status in the PN to "deregistered" 
and checks whether the PN UE was the only default UE in the PN. If it was the only default UE in the PN, the gsmSCF 
generates the USSD Notify message to the HSS to inform the user. 



Roles for PN-configuration 



7.1 Introduction 

This clause specifies the PN-configuration and PN-deconfiguration procedures for supporting PN UE redirection, PN 
access control and PN UE name changing. 

NOTE: The text string together with the angled bracket (e.g. <PNUEName>) represents an XML element defined 
by the XML schema in Annex B. 

Subclause A. 3 provides examples of signalling flows for PN-configuration and PN-deconfiguration. 

7.2 PN UE 

In order for the PN UE to initiate the PN-configuration procedure for creating/replacing or deleting an XML document, 
an element within an XML document or an attribute of an element within an XML document, the PN UE shall know the 
data structure and constrains defined by the PNM XML schema in Annex B. The PN UE shall also know what HTTP 
URI to use based on the naming conventions for constructing the HTTP URIs described in Annex C. 

The PN UE initiates the PN-configuration procedure or the PN-deconfiguration procedure by sending a HTTP PUT 
request or a HTTP DELETE request message with 

Request-URI field indicating to the PNM application the desired location where the XML document, an element 
within an XML document or an attribute of an element within an XML document which is requested to be 
configured as follows: 

if the PN-configuration procedure performed for configuring an XML document, the Request-URI is 
constructed with a document URI pointing to the XML document; 

if the PN-configuration procedure performed for configuring an element within an XML document, the 
document selector of the Request-URI is constructed with a document URI pointing to the XML document 
containing the element to be configured, and the node selector of the Request-URI with a node URI 
identifying the element to be configured; 

if the PN-configuration procedure performed for configuring an attribute of an element within an XML 
document, the document selector of the Request-URI is constructed with a document URI pointing to the 
XML document containing the element to be queried and the node selector of the Request-URI with a node 
URI identifying the attribute to be configured; 

Host field indicating the Internet host and port number of the PNM application; 

User-Agent field containing information about the user agent originating the request and the static string (e.g. 
3gpp-gba) to indicate to the NAF that the UE supports 3GPP -bootstrapping based authentication; 
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Referer field indicating the address (URI) of the resource from which the URI for the PNM apphcation is 
obtained; 

Authorization field containing the credentials obtained by means of executing the bootstrapping procedure with 
the BSF as described in 3GPP TS 33.220 [8]; 

Content-Type filed indicating 

"application/pnm+xml", if the PN-configuration is performed for configuring an XML document; 

"application/xcap-el+xml" as in IETF RFC 4825 [6], if the PN-configuration is performed for configuring an 
element within an XML document; 

"application/xcap-att-Hxml" as in IETF RFC 4825 [6], if the PN-configuration is performed for configuring an 
attribute of an element within an XML document; 

If the PN-configuration is performed for creating/replacing the XML document for the PN UE redirection purpose, the 
XML body of the HTTP PUT request message shall contain 

the <RedirectedUserID> containing the children <PNUEID> and <PNUEName>, and the <RedirectingUserID> 
with a unique value for the "id" attribute containing the children <PNUEID> and <PNUEName>, as well as the 
<RedirectionLevel> and the <RedirectionPrio>; 

NOTE: A PN user decides the value of the <RedirectionLevel> element based on the PN UE capabilities. 

According to the requirements of 3GPP TS 22.259 [2], this document supports three values (a global level 
for all services, a service level for selected services and a service component level the different media). 

the value of the "UriOfRedirectedUser" attribute for the <UERedirection> shall be populated with the public 
user identity of the PN UE configured by the PN UE to be redirected and indicated by the <RedirectedUserID>. 

If the PN-configuration is performed for creating/replacing the XML document for the PNE redirection purpose, the 
XML body of the HTTP PUT request message shall contain 

- the <RedirectedUserID> containing the children <PNUEID>, <PNEID> and <PNEName>, and the 
<RedirectingUserID> with a unique value for the "id" attribute containing the children <PNEID> and <PNEName>, 
as well as the <RedirectionLevel> and the <RedirectionPrio>; 

NOTE: A PN user decides the value of the <RedirectionLevel> element based on the PNE capabilities. According 
to the requirements of 3GPP TS 22.259 [2], this document supports three values (a global level for all 
services, a service level for selected services and a service component level the different media). 

- the value of the "UriOfRedirectedUser" attribute for the <PNERedrrection> shall be populated with the GRUU 
of the PNE configured by the PNE to be redirected and indicated by the <RedirectedUserID>. 

If the PN-configuration is performed for creating/replacing the XML document for the PN access control purpose, the 
XML body of the HTTP PUT request message shall contain 

the <ControllerUE> containing the children <PNUEID> and <PNUEName>, the <ControlleeUE> with a unique 
value for the "id" attribute containing children <PNUEID> and <PNUEName>, and the <PNAccessControlList> 
and <PNAccessControlType>; 

the value of the "UriOfControllerUE" attribute of the <AccessControl> shall be populated with the public user 
identity of the controller UE indicated by the <ControllerUE>. 

If the PN-configuration is performed for creating/replacing the XML document for the PNE access control piupose, the 
XML body of the HTTP PUT request message shall contain 

- the <ControllerUE> containing the children <PNUEID> and <PNUEName>, the <ControlleePNE> with a 
unique value for the "id" attribute containing children <PNUEID>, <PNEID> and <PNEName>, and the 
<PNAccessControlList> and <PNAccessControlType>; 

the value of the "UriOfControllerUE" attribute of the <AccessControl> shall be populated with the public user 
identity of the controller UE indicated by the <ControllerUE> 

If the PN-configuration is performed for the PN UE name changing purpose, and if the PN UE does not know the value 
of the "id" attribute of the <UEName> to be changed, the UE shall first initiate the PN-query procedure as specified in 
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clause 8 in order to cache a copy of the XML document containing the value of the "id" attribute of that 
<UEName>.The XML body of the HTTP PUT request message shall contain 

the <PNUEID> identified by the shared public user identity, the <UEName> containing an "id" attribute with the 
attribute value pointing to the <UEName> to be changed and the <Name> to be changed. 

If the PN-configuration is performed for configuring an element within an XML document, the XML body of the HTTP 
request message shall contain 

the XML element to be configured. 

If the PN-configuration is performed for configuring an attribute of an element within an XML document, the XML 
body of the HTTP request message shall contain 

the value of the attribute of an element to be configured. 



7.3 PNM application 



In order for the PNM application to support the PN-configuration procedure for creating/replacing or deleting an XML 
document, an element within an XML document or an attribute of an element within an XML document, the PNM 
application shall know the data structure and constrains imposed by the PNM XML schema in annex B. The PNM 
application shall also be configured to be able to handle the HTTP URIs described in annex C. 

Upon receiving an HTTP PUT request or a HTTP DELETE request message, PNM application verifies the 
Authorization header by using the bootstrapping transaction identifier B-TID and the key material Ks_NAF obtained 
from BSF (as described in 3GPP TS 33.220 [8]). If the verification succeeds, the PNM application obtains the private 
user identity associated with the received public user identity. The PNM application then authorizes the PN UE by 
comparing the received public user identity with the preconfigured one identified by the private user identity. 

If the authorization succeeds, the PNM application shall perform the requested action and generate a response in 
accordance with IETF RFC 4825 [6]. 



8 Roles for PN-query 

8.1 Introduction 

This clause specifies the PN-query procedure. 

Annex A.3 provides examples of signalling flows for PN-query. 

8.2 PN UE 

In order for the PN UE to initiate the PN-configuration procedure for querying an XML document, an element within an 
XML document or an attribute of an element within an XML document, the PN UE shall know the data structure and 
constraints defined by the PNM XML schema in annex B. The PN UE shall also know what HTTP URI to use based on 
the naming conventions for constructing the HTTP URIs described in annex C. 

The PN UE initiates the PN-query procedure by sending a HTTP GET request message with 

Request-URI field indicating to the PNM application the desired location where the XML document, an element 
within an XML document or an attribute of an element within an XML document which is queried as follows: 

if an XML document is queried, the Request-URI is constructed with a document URI pointing to the XML 
document; 

if an element within an XML document is queried, the document selector of the Request-URI is constructed 
with a document URI pointing to the XML document containing the element to be queried and the node 
selector of the Request-URI with a node URI identifying the element to be queried; 
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if an attribute of an element within an XML document is queried, the document selector of the Request-URI 
is constructed with a document URI pointing to the XML document containing the element to be queried and 
the node selector of the Request-URI with a node URI identifying the attribute to be queried. 

Host field indicating the Internet host and port number of the PNM application 

User-Agent field containing information about the user agent originating the request and the static string (e.g. 
3gpp-gba) to indicate to the NAF that the UE supports 3GPP -bootstrapping based authentication, 

Referrer field indicating the address (URI) of the resource from which the URI for the PNM application is 
obtained. 

Authorization field containing the credentials obtained by means of executing the bootstrapping procedure with 
the BSF as described in 3GPP TS 33.220 [8]. 



8.3 PNM application 



In order for the PNM application to support the PN-configuration procedure for querying an XML document, an 
element within an XML document or an attribute of an element within an XML document, the PNM application shall 
know the data structure and constraints imposed by the PNM XML schema in annex B. The PNM application shall also 
be configured to be able to handle the HTTP URIs described in annex C. 

Upon receiving an HTTP GET request message, PNM application verifies the Authorization header by using the 
bootstrapping transaction identifier B-TID and the key material Ks_NAF obtained from BSF (as described in 
3GPPTS 33.220 [8]). 

If the verification succeeds, the PNM application shall perform the requested action and generate a response in 
accordance with IETF RFC 4825 [6] with an XML body containing either the XML document, or the element within an 
XML document or the attribute of an element within an XML document as queried by the PN UE. 



9 Roles for PN redirection 

9.1 Introduction 

The PN redirection redirects sessions containing in the Request-URI the address of any UEs of a PN to the default UE 
or the default PNE of the same PN as described in 3GPP TS 22.259 [2] and in 3GPP TS 23.259 [15]. 

9.2 PN UE 

There is no PNM specific requirement for the PN UE redirection. 

Upon receiving a SIP INVITE request containing in the Request-URI the address of PNE, the UE shall forward the SIP 
INVITE request to the PNE via the PAN internal interface. 

NOTE: The PAN internal interface is out of scope of this document. 

9.3 PNM application 

9.3.1 PN UE redirection procedure in the IM CN subsystem 

When the PNM AS receives an initial request containing in the Request-URI the address of a UE or a PNE that exists in 
the PN configuration due to the terminating initial filter criteria, the PNM AS shall verify if the address in the Request- 
URI exists in a <RedirectingUserID> element in the PN configuration. If there is a matching <RedirectingUserID> 
element the PNM AS shall send an initial request of the same SIP Method on a new dialog to the URI contained in the 
<RedirectedUserID> element. The PNM AS then routes the initial request based on the standard call setup procedures 
as specified in 3GPP TS 24.229 [3]. 



£75/ 



3GPP TS 24.259 version 9.0.0 Release 9 1 5 ETSI TS 1 24 259 V9.0.0 (201 0-01 ) 

NOTE: The PNM AS is triggered first by forming the initial filter criteria in the S-CSCF. 
The PNM AS shall include in the request the following: 

a) a Request-URI set to the SIP URI contained in the <RedirectedUserID> element (e.g. a public user identity or a 
GRUU); 

b) a From header set to the SIP URI of the PNM AS; 

c) a To header set to the URI contained in the <RedirectedUserID> element; 

d) a P-Asserted-Identity header set to the contents of the P-Asserted-Identity header in the original initial request; 

e) a Contact header set to the IP address or FQDN of the PNM AS; 

f) a Supported header containing the option tags from the original initial request with the addition of the option tag 
"histinfo"; 

g) a History-Info header that includes as the Targeted-to-URI the URI from the Request-URI of the original initial 
request, and as the next branch index URI, the contents of the Request-URI of this request. 

If the PNM AS receives in response a 4xx, 5xx or 6xx response, and there exists more <RedirectedUserID> elements in 
the PN configuration which have not had the request forwarded to them yet, then the PNM AS shall send an initial 
request of the same SIP Method on a new dialog to the URI of the UE or the PNE contained in the next lower priority 
<PNController> element as above. 

Otherwise, if there does not exist more <RedirectedUserID> elements in the PN configuration which have not had the 
request forwarded to them yet, then the PNM AS shall forward the response back towards the originator of the initial 
request. 

If the PNM AS receives in response a 200 (OK) response, the PNM AS shall forward the response back towards the 
originator of the initial request. 

9.3.2 PN UE redirection procedure in tine CS domain 

When the PNM application receives an indication that the gsmSCF has received a CAMEL IDP relating to a 
terminating call, the PNM application shall: 

1) check if the re-direction is applicable for the call on the basis of service key and called party number received in 
CAMEL IDP message. 

2) if the call is not subject to re-direction, cause the gsmSCF to respond with a CAMEL CONTINUE and no further 
PNM specific procedures are performed on this call. 

3) if the call is subject to re-direction, retrieve the Destination Routing Address. 

4) if the call is subject to re-direction, cause the gsmSCF to respond with a CAMEL CONNECT message with the 
Destination Routing Address set to the MSISDN of default UE. 

When the PNM application receives an indication that the gsmSCF has received a EventReportBCSM message 
indicating that the default UE cannot setup the session/call, the PNM application shall: 

1) retrive the Destination Routing Address of the other UE of the next lower priority based on the PN- 
configuration. 

2) cause the gsmSCF to respond with a CAMEL CONNECT message with the Destination Routing Address set to 
the MSISDN of the selected UE. 

3) if there are no more UEs selected for redirection, cause the gsmSCF to respond with a CAMEL CONTINUE 
and no further PNM specific procedures are performed on this call. 
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1 Roles for PN access control 

10.1 Introduction 

The PN access control procedure enables the controller UE to exercise access control to restrict accesses to certain PN 
controUee UE(s) of the PN as described in 3GPP TS 23.259 [15]. 

10.2 PNUE 

When the PN UE that supports the PN controller functionality and that is configured to act as a PN controller receives 
an initial request containing an Accept-Contact header containing a g.3gpp.iari_ref feature tag containing the lARI 
value defined in sub clause 10.4 and a target URI-parameter in the Request-URI, then the PN UE shall perform the PN 
controller function and indicate to the user that the PN controller UE has received a request for the PN controllee UE, 
otherwise the PN UE shall not perform the PN controller function and shall follow the UE terminating case procedures 
in3GPPTS24.229[3]. 

When performing the PN controller function the PN UE shall: 

a) indicate the PN controllee UE indicated by the URI in the target URI-parameter contained in the Request-URI; 

b) indicate the identity of the originating user indicated in the P-Asserted-Identity header. 
The PN UE may offer the user the following options: 

a) allow the request to be forwarded to the PN controllee UE; 

b) deny the request (i.e reject the session); 

c) accept the request (i.e establish the session). 

When allowing the request to be forwarded to the PN controllee UE the PN UE shall send a 302 (Moved Temporarily) 
response. The PN UE constructs the response as follows: 

a) shall include a Contact header containing the URI from the target URI-parameter in the Request-URI of the 
incoming request; 

b) shall include a History-Info header copied from the incoming request unless the user wishes not to reveal to the 
user of the PN controllee UE that the request was forwarded first to the PN controller UE. 

When the user allows the request to be forwarded to the PN controllee UE the PN UE may allow the user to add the 
URI from the P-Asserted-Identity header to a <PNAccessControlList> using the procedure in subclause 7.2. 

When denying the request to be forwarded to the PN controllee UE the PN UE shall send either: 

a) a 480 (Temporarily Unavailable) response if the user wishes to not allow the PN controllee UE to receive 
requests from the originator at this time but may allow requests at some future time; 

b) a 410 (Gone) response if the user wishes to not allow the PN controllee UE to receive requests from the 
originator at any time but wishes the originator to not know that the request was actively blocked; or 

c) a 403 (Forbidden) response if the user wishes to not allow the PN controllee UE to receive requests from the 
originator at any time and wishes the originator to know that the request was actively blocked. 

The PN UE should only send a 480 (Temporarily Unavailable) response to PN controller request when the user has 
specifically denied the request as this will prevent the request being forwarded to other PN controller UEs. When the 
user allows the request to be forwarded to the PN controllee UE the PN UE may allow the user to add the URI from the 
P-Asserted-Identity header to a <PNAccessControlList> using the procedure in subclause 7.2. 

When the user accepts the request the PN UE shall follow the procedures in 3GPP TS 24.229 [3]. 
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When a PN UE that does not support the PN controller functionality or that is not configured to act as a PN controller 
(i.e a PN controllee UE) receives an initial request the PN UE shall follow the UE terminating case procedures in 
3GPPTS 24.229 [3]. 

10.3 PNM application 

1 0.3.1 PN access control procedure in the IM CN subsystem 

When the PNM AS receives an initial request containing in the Request-URI the address of a PN UE within the same 
PN as the originating PN UE the PNM AS shall allow the request to continue normally. 

When the PNM AS receives an initial request from a UE that is not a member of the same PN as the PN UE that's 
address is contained in the Request-URI and the PN Access Control is not enabled the PNM AS shall return a 403 
(Forbidden) response. 

When the PNM AS receives an initial request from a UE that is not a member of the same PN as the PN UE that's 
address is contained in the Request-URI and the address in the Request-URI exists in a <PNController> element in the 
PN access control list the PNM AS shall allow the request to continue normally. 

When the PNM AS receives an initial request due to the terminating initial filter criteria, from a UE that is not a 
member of the same PN as the PN UE that's address is contained in the Request-URI and the address in the Request- 
URI exists in a <PNControllee> element in the PN access control list the PNM AS shall verify if the address in the P- 
Asserted-Identity exists in a <PNAccessControlList> element in the PN access control list. 

NOTE: The PNM AS is triggered first by forming the initial filter criteria in the S-CSCF. 

If there is a matching <PNAccessControlList> element the PNM AS shall allow the request to continue normally. 

If there is no matching <PN AccessControlList> element the PNM AS shall send an initial request of the same SIP 
Method on a new dialog to the URI of the PN controller UE contained in the <PNController> element if it exists. If no 
<PNController> element exists then the PNM AS shall return a 403 (Forbidden) response. When sending the initial 
request to the PN controller UE the PNM AS shall include in the request the following: 

a) a Request-URI set to the SIP URI contained in the <PNController> element along with a target URI-Parameter 
as defined in IETF RFC 4458 [17] set to the URI from the Request-URI of the original initial request; 

b) a From header set to the SIP URI of the PNM AS; 

c) a To header set to the URI contained in the <PNController> element; 

d) a P-Asserted-Identity header set to the contents of the P-Asserted-Identity header in the original initial request; 

e) a Contact header set to the IP address or FQDN of the PNM AS; 

f) a Supported header containing the option tags from the original initial request with the addition of the option tag 
"histinfo"; 

g) a History-Info header that includes as the Targeted-to-URI the URI from the Request-URI of the original initial 
request, and as the next branch index URI, the contents of the Request-URI of this request including the target 
URI-parameter along with the index parameters as specified in IETF RFC 4244 [16]; 

h) an Accept-Contact header containing the g.3gpp.iari_ref feature tag containing the lARI value <urn:urn-7:3gpp- 
application.ims.iari.PNM-Controller>. 

If the PNM AS receives in response a 302 (Moved Temporarily) response the PNM AS shall redirect the original 
incoming request to URI contained in the Contact header of the 302 (Moved Temporarily) response. The PNM AS shall 
add to the request the following: 

a) a Request-URI set to the SIP URI contained in the Contact header of the 302 (Moved Temporarily) response; 

b) a Supported header containing the option tags from the original initial request with the addition of the option tag 
"hist-info"; 
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c) a History-Info header that includes the URIs from the History-Info header in the 302 (Moved Temporarily) 
response along with the contents of the Request-URI of this request as the next branch index URI under the top 
level Targeted-to-URI, along with the appropriate index parameter as specified in IETF RFC 4244 [16], if the 
302 (Moved Temporarily) response contains a History-Info header; 

If the PNM AS receives in response a 4xx (other than a 403 (Forbidden) response or 410 (Gone) response or 480 
(Temporarily Unavailable) response), 5xx or 6xx response and there exists more <PNController> elements in the PN 
access control list which have not had the request forwarded to yet, then the PNM AS shall send an initial request of the 
same SIP Method on a new dialog to the URI of the PN controller UE contained in the <PNController> element as 
above except that the History-Info header shall include the URIs from the History-Info header in the 302 (Moved 
Temporarily) response and as the next branch index URI, the contents of the Request-URI of this request including the 
target URI-parameter along with the index parameters as specified in IETF RFC 4244 [16]; 

Otherwise, if there does not exist more <PNController> elements in the PN access control list which have not had the 
request forwarded to yet, then forward the response back towards the originator of the initial request. 

If the PNM AS receives in response a 200 (OK) response, a 403 (Forbidden) response, a 410 (Gone) response or 480 
(Temporarily Unavailable) response the PNM AS shall forward the response back towards the originator of the initial 
request. 

1 0.3.2 PN access control procedure in the CS domain 

When the PNM application receives an indication that the gsmSCF has received a CAMEL IDP relating to a 
terminating call, the PNM application shall: 

1) check if the access control is applicable on basis of service key and called party number received in CAMEL 
IDP message. 

2) if the call is not subject to access control, cause the gsmSCF to respond with a CAMEL CONTINUE and no 
further PNM specific procedures are performed on this call. 

3) if the call is subject to access control, it cause the gsmSCF perform as follows: 

a) check if the calling party is configured in PN access control list. 

b) if the calling party is configured in PN access control Iist,cause the gsmSCF to respond with CAMEL 
CONTINUE message to GMSC. 

c) if the calling party is not configured in PN access control list,cause the gsmSCF to generate the USSD 
request message to controller UE. 

4) based on controller" s response it cause the gsmSCF respond with CAMEL CONTINUE or CALL RELEASE 
message to GMSC. 

10.4 PNM controller IMS application reference identifier 

The URN used to define the lARI for the PNM controller application: value urn:urn-7:3gpp-application.ims.iari.pnm- 
controller. The URN is registered at http://www.3gpp.com/Uniform-Resource-Name-URN-list.html. 

Summary of the URN: This URN indicates that the device supports the PNM controller application 

The URN is intended primarily for use in the following applications, protocols, services, or negotiation mechanisms: 

This URN is most useful in a communications application, for describing the capabilities of a device, such as a 
phone or PDA. 

Examples of typical use: Indicating that a mobile phone supports the PNM controller application. 

Related standards or documents: 

- 3GPP TS 24.259: "Personal Network Management (PNM), stage 3" [3] 
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1 1 Protocol at the Ut reference point 

11.1 Introduction 

XML Configuration Access Protocol (XCAP) is used to create, read, write, modify and delete data related to the PNM 
service. XCAP uses the HTTP methods PUT, GET and DELETE for communication over the Ut reference point. 

1 1 .2 Roles 

11.2.1 XCAP client 

The XCAP client is a logical function as defined in IETF RFC 4825 [6]. The XCAP client provides the means to create, 
read, write, modify and delete the data used for the PNM services. In doing so, it shall generate an HTTP PUT, or an 
HTTP GET or an HTTP DELETE request in accordance with IETF RFC 2616 [7] and 3GPP TS 24.623 [18]. 

1 1 .2.2 XCAP server 

The XCAP server is a logical function as defined in IETF RFC 4825 [6]. The XCAP server stores all data relevant for 
the PNM services. When the XCAP server receives an HTTP PUT, HTTP GET or HTTP DELETE request for 
manipulating the data base, the XCAP server shall first authenticate the request in accordance with 3GPP TS 24.109 [5] 
and then perform authorization. Afterwards the XCAP server shall perform the requested action and generate a response 
in accordance with IETF RFC 2616 [7] and 3GPP TS 24.623 [18]. 
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Annex A (informative): 
Example signalling flows 

A.1 Scope of signalling flows 

This annex gives examples of signalling flows for Personal Network Management based on XCAP, the Session 
Initiation Protocol (SIP) and SIP Events. 

These signalling flows provide detailed signalling flows, which expand on the overview information flows provided in 
3GPPTS 23.259 [15]. 



A.2 Introduction 
A.2.1 General 

The signalling flows provided in this annex follow the methodology developed in 3GPP TS 24.228 [10]. The following 
additional considerations apply: 

a) 3GPP TS 24.228 [10] shows separate signalling flows with no configuration hiding between networks, and with 
configuration hiding between networks. There is no personal network management specific functionality 
associated with this hiding, and therefore such separate signalling flows are not show in the present document; 

b) 3GPP TS 24.228 [10] does not show the functionahty between the S-CSCF and the AS. As personal network 
management depends on the functionality provided by various AS, the signalling flows between S-CSCF and AS 
are shown in the present document; 

c) 3GPP TS 24.228 [10] breaks down the functionality of the various CSCFs. Such intervening activity in the 
CSCFs is in general not relevant to showing the functionality within personal network management, and 
therefore the CSCFs are often collapsed into a single entity labelled "Intermediate IM CN subsystem entities"; 

d) where entities are combined as in c) above, and the signalling flow is directed to such a combined entity, the 
contents of the signalling flow represent the contents of the sending entity except when otherwise stated; 

e) where entities are combined as in c) above and the signalling flow originates at such a combined entity, the 
contents of the signalling flow represent the contents of the receiving entity except when otherwise stated; 

f) within the CS domain, both ISUP and BICC can be used. The signalling flows represent only the ISUP 
signalling flows, and the BICC signalling flows (which can be assumed to be similar with no additional PNM 
specific content) are not shown; and 

g) additional functionality from 3GPP releases 6, 7 and 8 over and above that shown in 3GPP TS 24.228 [10] is 
incorporated in these. 

A.2. 2 Key required to interpret signalling flows 

The key to interpret signalling flows specified in 3GPP TS 24.228 [10] subclauses 4.1 and 4.2 applies with the additions 
specified below: 

Consistent with the conventions used in 3GPP TS 24.228 [10] homel.net is used for the home network of the 
originating user and home2.net is used for the home network of the terminating user. In registration and 
configuration flows the PN UE and PNM network elements are considered to be in homel.net, however in 
scenarios such as PN redirection and PNM access control where the PNM elements are in the terminating 
network the PN UE and PNM network elements are considered to be in home2.net. Therefore in some flows 
identities shown as home2.net are equivalent to the identities shown as homel.net in other flows and as 
described further below. 
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For signaling flows for PN-registration (see subclause A. 3. 2) and PN-configuration (see subclause A.3.3) the following 
applies: 

pnmas.homel .net: 1234 represents the Internet host and port number of the PNM AS, which can be obtained by a 
PN UE from the address (URI) of the resource http://pnmas.homel.net:1234/service. 

PN_userl_publicl @homel.net, PN_userl_public2@homel.net, etc. represent the public user identities 
configured for a PN-user for the PN UE#1. PN_user2_publicl @homel.net, PN_user2_public2@homel.net, etc. 
represent the public user identities configured for a PN-user for the PN UE#2, etc. PN_user_public@homel.net 
represents the shared public user identity. 

PN_userl_private@homel.net represents the private user identity configured for a PN-user for PN UE#1. 
PN_user2_private@homel.net represents the private user identity configured for a PN-user for PN UE#2, etc. 

PN_userl_friend_publicl @homel.net, PN_userl_friend_public2@homel.net etc represent the public user 
identities of a PN access control list configured for PN UE#1. PN_user2_friend_publicl @homel.net, 
PN_user2_friend_public2@homel.net etc represent the public user identities of a PN access control list 
configured for PN UE#2, etc. 

PN_userl_publicl_old and PN_userl_publicl_new represent the old and the new PN UE names related to the 
public user identity PN_userl_publicl@homel.net, PN_user2_publicl_old and PN_user2_publicl_new 
represent the old and the new PN UE names related to the public user identity PN_user2_publicl @homel.net. 

For signaling flows for PN UE redirection (see subclause A. 3.4), PN access control (see subclause A.3.5) and inter- 
domain networking (see subclause A.3.6) the following applies: 

PN_userl_public@home2.net, PN_user2_public@home2.net, etc. represent the public user identities for the PN 

UEs; 

userl_publicl @homel .net represents a user outside of the personal network originating a session to a user 
within the personal network. 

In order to differentiate between messages for HTTP, SIP, Diameter and media flows over CS and PS connections, the 
notation in figure A. 2. 2-1 is used. 



GET 



-O HTTP message 



INVITE 



Diameter message 
-► SIP message 



SETUP 



CS message 
Media over a PS connection 



Media over a CS connection 



Figure A.2.2-1 : Signalling flow notation 
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A.3 Signalling flows 
A.3.1 Introduction 

The signalling flows demonstrate how the PN-registration, PN-configuration, PN UE redirection and PN access control 
procedures work. The following signalling flows are included: 

subclause A. 3. 2. 1 shows the successful PN-registration in the IM CN subsystem using third party registration; 

subclause A. 3. 2.2 shows the successful PN-registration with subscription to reg event package; 

subclause A. 3. 3.1 shows the successful PN-configuration for PN UE redirection; 

subclause A. 3. 3. 2 shows the successful PN-configuration for PN access control; 

subclause A. 3. 3. 3 shows the successful PN-configuration for changing PN UE name; 

subclause A. 3. 3.4 shows the successful PN-query; 

subclause A. 3. 3. 5 shows the successful PN-deconfiguration; 

subclause A. 3. 4. 1 shows the successful for PN UE redirection in the IM CN subsystem; 

subclause A. 3. 4. 2 shows the successful PN UE redirection in the CS domain; 

subclause A. 3. 5.1 shows the successful PN access control procedure in IM CN subsystem; 

subclause A. 3. 5. 2 shows the successful PN access control procedure in CS domain; 

subclause A. 3. 6.1 shows the successful interdomain networking (IM CN subsystem to CS domain); 

subclause A. 3. 6.2 shows the successful interdomain networking (CS domain to IM CN subsystem); 

A.3. 2 Signalling flows for PN-registration 

A.3. 2.1 PN-registration in tine IM CN subsystem using \h\r6 party registration 

Figure A.3. 2. 1-1 details the signalling flows for a successful PN-registration in the IM CN subsystem using third party 
registration. In this scenario the PN UE also performs the PN controller function. 
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UE 




S-CSCF 



1. REGISTER 



PNMAS 



HSS 



2. Cx S-CSCF registration notification 



4. REGISTER 



5. 200 (OK) 



6. Sh-Pull 



7. Sh-Pull Resp 



Figure A.3.2.1-1 : Successful PN-registration signalling: in the IM CN subsystem using third party 

registration 

1. REGISTER request (FN UE to IM CN subsystem entities) 

PN UE initiates a REGISTER request after successful authentication. 

Table A.3.2.1-1 : REGISTER request (PN UE to IM CN subsystem entities) 

REGISTER sip: registrar. homel.net SIP/2.0 

Via: SIP/2. 0/UDP icscf l_p . homel . net ;branch=z9hG4bK351g45 . 1 , SIP/2. 0/UDP 
pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, SIP/2 . 0/UDP 
[5555 : : aaa : bbb : ccc :ddd] : 1357;comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 68 

P-Access-Network-Info: 3GPP-UTRAN-TDD; utran-cell-id-3gpp=234151D0FCEll : 3GPP-UTRAN; np 
Path: <VskztcQ/S8p4WPbOnHbuyh5iJvJIW3ib@pcscf 1 .visitedl .net : 13 3 7; lr;ob> 
Require: path 

P-Visited-Network-ID : "Visited Network Number 1" 

P- Charging- Vector : icid-value="AyretyU0dm+6O2IrT5tAFrbHLso=023 551024" 
From: <sip : PN_userl_publicl@homel .net>; tag=4f a3 
To : <sip : PN_userl_publicl@homel . net> 

Contact: <sip: [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp> ; reg-id=l ; 
+sip. instance="<urn:uuid: f 81d4f ae-7dec-lld0-a765-00a0c91e6bf 6>" ; 
+g. 3gpp .icsi-ref= 'urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" ; 
+g. 3gpp . iari-ref ="urn%3Aurn-7%3A3gpp-application. ims . iari .pnm-controller" ; 
+g. 3gpp . cs-audio; 
+g. 3gpp . cs-video; 
expires=600000 

Call -ID: apb0 3aOs0 9dkjdfglkj4 9111 

Authorization: Digest username="userl_private@homel .net" , realm="registrar .homel .net" , 
nonce=base64 {RAND + AUTN + server specific data), algorithm=AKAvl-MD5 , 

uri=" sip: registrar .homel .net" , response="6 62 9f ae4 93 93a0 5 3 974 5 978 5 7c4ef 1" , integrity- 
protected= "yes " 
CSeq: 2 REGISTER 
Supported: gruu, outbound 
Content-Length: 

NOTE: the above REGISTER request contents are shown as received at the S-CSCF not as sent by the PN UE. 

2. Cx: S-CSCF registration notification procedure 
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There is no PNM specific content to this, for detailed message flows see 3GPP TS 29.228 [11] in 
subclause 6.1.2. 

3. SIP 200 (OK) response (IM CN subsystem entities to PN UE) 

4, REGISTER request (S-CSCF to PNM AS) 

After PN UE successfully registered in the IM CN subsystem, the S-CSCF sends a third party REGISTER 
request containing in the body the incoming REGISTER request from the PN UE and the 200 (OK) response to 
the incoming REGISTER request to the PNM AS based on the initial filter criteria it received which contains an 
Include Register Request XML element and an Include Register Response XML element. 

Table A.3.2.1-4: REGISTER request (S-CSCF to PNM AS) 

REGISTER sip: pnmas .homel .net SIP/2.0 

Via: SIP/2. 0/UDP pnmas . homel . net ;branch=z9hG499ffhy 

Max- Forwards : 70 

From: <sip : scscfl . homel . net> ; tag=538ya 

To: <sip: PN_userl_publicl@homel.net > 

Call-ID: lasdaddlrf jflslj40a222 

Contact: <sip : scscfl .homel .net>; expires=600000 

CSeq: 87 REGISTER 

Content-Type : multipart/mixed;boundary="boundaryl" 

Content-Length: (...) 

--boundaryl 

Content-Type: message/sip 

REGISTER sip:registrar .homel .net SIP/2.0 

Via: SIP/2. 0/UDP icscfl_p . homel . net ;branch=z9hG4bK351g45 . 1 , SIP/2. 0/UDP 
pcscfl.visitedl.net;branch=z9hG4bK24 0f34 .1, SIP/2 . 0/UDP 
[5555 : : aaa :bbb : ccc : ddd] : 13 5 7 ; comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 68 

P-Access-Network-Info: 3GPP-UTRAN-TDD; utran-cell-id-3gpp=234151D0FCEll : 3GPP-UTRAN; np 
Path: <VskztcQ/S8p4WPbOnHbuyh5iJvJIW3ib@pcscf 1 .visitedl.net : 1337; lr;ob> 
Require: path 

P-Visited-Network-ID : "Visited Network Number 1" 

P- Charging- Vector : icid-value="AyretyU0dm+6O2IrT5tAFrbHLso=023551024" 
From: <sip : PN_userl_publicl@homel .net>; tag=4f a3 
To : <sip : PN_userl_publicl@homel . net> 

Contact: <sip: [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp = sigcomp> ; reg-id=l ; 
+ sip. instance="<urn:uuid: f 81d4f ae-7dec-lld0-a765-00a0c91e6bf 6>" ; 
+g. 3gpp . icsi-ref = ' urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" ; 
+g. 3gpp. iari-ref="urn%3Aurn-7%3A3gpp- application. ims . iari .pnm- controller" ; 
+g. 3gpp . cs -audio ; 
+g. 3gpp . cs -video ; 
expires=600000 

Call -ID: apb0 3a0s0 9dkjdfglkj4 9111 

Authorization: Digest username="userl_private@homel .net" , realm="registrar .homel .net" , 
nonce=base64 {RAND + AUTN + server specific data), algorithm=AKAvl-MD5 , 

uri=" sip: registrar .homel .net" , response="662 9f ae4 9393a0 53974 50 97850 7c4ef 1" , integrity- 
protected= "yes " 
CSeq: 2 REGISTER 
Supported: gruu, outbound 
Content-Length: 

--boundaryl 

Content-Type: message/sip 

SIP/2.0 200 OK 

Via: SIP/2. 0/UDP icscfl_p . homel . net ;branch=z9hG4bK351g45 . 1 , SIP/2. 0/UDP 
pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, SIP/2 . 0/UDP 
[5555 : : aaa :bbb : ccc : ddd] : 13 57 ; comp = sigcomp;branch=z9hG4bKnashds7 
Path: <sip : termOpcscf 1 .visitedl .net; lr> 
Service-Route : <sip : origOscscf 1 . homel . net ; lr> 
From: <sip : PN_userl_publicl@homel . net> ; tag=4f a3 
To : <sip : PN_userl_publicl®homel . net> 
Call -ID: apb03a0s0 9dkjdfglkj4 9111 

Contact: <sip: [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp = sigcomp> ; 

pub-gruu="sip : PN_userl_publicl@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a765-0 0a0c91e6bf 6" ; 
temp-gruu="sip : tgruu. 7hs==jd7vnzga5w7f aj sc7-ajd6f abzOf 8g5®example . com;gr" ; 
reg-id=l; 

+sip. instance="<urn:uuid: f 81d4f ae-7dec-lld0-a765-00a0c91e6bf 6>" ; 
+g. 3gpp. icsi-ref=' urn%3Aurn- 7 %3A3gpp- service. ims .icsi .mmtel" ; 
+g. 3gpp . iari -ref="urn%3Aurn-7%3A3gpp- application. ims . iari .pnm- controller" ; 
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+g. 3gpp. cs -audio ; 

+g. 3gpp. cs -video ; 

expires=600000 

CSeq: 2 REGISTER 

Supported: path, outbound 

Require : outbound 

Date: Wed, 11 July 2001 08:49:37 GMT 

P-Associated-URI : <sip : PN_userl_public2@homel .net>, <sip : PN_userl_public3@homel .net>, <sip : +1-212- 

555-llll@homel . net ; user =phone> 

Content-Length: 



-boundaryl- 



5. SIP 200 (OK) response (PNM AS to S-CSCF) 

6. Sh-Pull (AS to HSS) 

For detailed message flows see 3GPP TS 29.328 [9] in subclause 6.1.1. 

7. Sh-Pull Response (HSS to PNM AS) 

As a successful verification, the PNM AS enrols the public user identity as registered in the database. 

A.3.2.2 PN-registration in the IM CN subsystem with subscription to reg 
event package 

Figure A.3.2.2-1 details the signalling flows for a successful PN-registration in the IM CN subsystem with subscription 
to reg event package. In this scenario the PN UE also performs the PN controller function. 



UE 



S-CSCF 



1. REGISTER 



3. 200 (OK) 



PNM AS 



HSS 



2. Cx S-CSCF registration notification 



4. REGISTER 



5. 200 (OK) 



6. SUBSCRIBE 



7. 200 (OK) 



8. NOTIFY 



9. 200 (OK) 



10. Sh-Pull 



11. Sh-Pull Resp 



Figure A.3.2.2-1: Successful PN-registration signalling: in the IM CN subsystem with subscription to 

reg event package 

1. REGISTER request (PN UE to IM CN subsystem entities) 

PN UE initiates a REGISTER request after successful authentication. 
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Table A.3.2.2-1 : REGISTER request (PN UE to IM CN subsystem entities) 

REGISTER sipiregistrar .homel .net SIP/2.0 

Via: SIP/2. 0/UDP icscfl_p. homel. net;branch=z9hG4bK351g45 .1, SIP/2. 0/UDP 
pcscfl.visitedl.net;branch=z9hG4bK24 0f34 .1, SIP/2 . 0/UDP 
[5555 : : aaa :bbb : ccc :ddd] : 13 57;comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 68 

P-Access-Network-Info: 3GPP-UTRAN-TDD; utran-cell-id-3gpp=234151D0FCEll : 3GPP-UTRAN; np 
Path:<VskztcQ/S8p4WPbOnHbuyh5iJvJIW3ib@pcscf 1 .visitedl .net : 13 3 7; lr;ob> 
Require: path 

P-Visited-Network-ID : "Visited Network Number 1" 

P- Charging- Vector : icid-value="AyretyU0dm+6O2IrT5tAFrbHLso=023551024" 
From: <sip : PN_userl_publicl@homel .net>; tag=4f a3 
To : <sip : PN_userl_publicl@homel . net> 

Contact: <sip: [5555: : aaa :bbb : ccc : ddd] : 1357 ; comp=sigcomp> ; reg-id=l ; 
+sip. instance="<urn:uuid: f 81d4f ae-7dec-lld0-a765-00a0c91e6bf 6>" ; 
+g. 3gpp .icsi-ref= 'urn%3Aurn-7%3A3gpp- service. ims . icsi .mmtel" ; 
+g. 3gpp. iari-ref="urn%3Aurn-7%3A3gpp- application. ims . iari .pnm- controller" ; 
+g. 3gpp. cs -audio ; 
+g. 3gpp . cs -video, - 
expires=600000 

Call -ID: apb03aOs0 9dkjdfglkj4 9111 

Authorization: Digest username="userl_private@homel .net" , realm="registrar .homel .net" , 
nonce=baseS4 {RAND + AUTN + server specific data), algorithm=AKAvl-MD5 , 

uri=" sip: registrar .homel .net" , response="6 62 9f ae4 93 93a0 5 3 974 5 978 5 7c4ef 1" , integrity- 
protected= "yes " 
CSeq: 2 REGISTER 
Supported: gruu, outbound 
Content-Length: 

NOTE: The above REGISTER request contents are shown as received at the S-CSCF not as sent by the PN UE. 

2. Cx: S-CSCF registration notification procedure 

There is no PNM specific content to this, for detailed message flows see 3GPP TS 29.228 [11] in 
subclause 6.1.2. 

3. SIP 200 (OK) response (IM CN subsystem entities to PN UE) 

4. REGISTER request (S-CSCF to PNM AS) 

After PN UE successfully registered in the IM CN subsystem, the S-CSCF sends a third party REGISTER 
request containing in the body a <service-info> element containing the private user identity of the PN UE to the 
PNM AS based on the initial filter criteria it received which contains the <service-info> element containing the 
private user identity of the PN UE. 

Table A.3.2.2-4: REGISTER request (S-CSCF to PNIVI AS) 

REGISTER sip: pnmas. homel .net SIP/2.0 

Via: SIP/2. 0/UDP pnmas . homel . net ,-branch=z9hG499ffhy 

Max-Forwards: 70 

From: <sip : scscfl .homel .net>; tag=538ya 

To: <sip: PN_userl_publicl(ahomel .net> 

Call-ID: lasdaddlrf jflslj40a222 

Contact: <sip : scscfl .homel .net>,- expires = 600000 

CSeq: 87 REGISTER 

Content-Type : application/3gpp-ims+xml 

Content-Length: (...) 

<3gpp-ims version="l"> 

< service- info>sip : PN_userl_private@homel . net </ service- info > 

</3gpp-ims> 

5. SIP 200 (OK) response (PNM AS to S-CSCF) 

6. SUBSCRIBE request (PNM AS to S-CSCF) - see example in table A.3.2.2-6 

The PNM AS sends the SUBSCRIBE request to the S-CSCF to the reg event package for the public user 
identity. 
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Table A.3.2.2-6: SUBSCRIBE request (PNM AS to S-CSCF) 

SUBSCRIBE sip: PN_userl_publicl(ahomel . net SIP/2.0 

Via: SIP/2. 0/UDP pnmas . homel . net ;branch=z9hG4bK240f 34 . 1 

Max- Forwards : 70 

Route: <sip : scscfohomel .net ; lr> 

Privacy: none 

From: <sip: pnamas . homel . net > ; tag=31415 

To: <sip: PN_userl_publicl(ahomel .net> 

Call -ID: b8 9rjhnedlrf jflslj4 0a222 

CSeq: 61 SUBSCRIBE 

Event : reg 

Expires: 600000 

Accept: application/reginfo+xml 

Contact: <sip :pnmas .homel .net> 

Content-Length: 

7. SIP 200 (OK) response (S-CSCF to PNM AS) 

8. NOTIFY request (S-CSCF to PNM AS) - see example in table A.3.2.2-8 

The S-CSCF sends a first NOTIFY request towards the PNM AS in order to inform the PNM AS about the 
registration status of monitored user and the UE capabiHties. 

Table A.3.2.2-8: NOTIFY request (S-CSCF to PNM AS) 

NOTIFY sip: pnmas.homel.net SIP/2.0 

Via: SIP/2. 0/UDP scscf ©homel. net ;branch=z9hG4bK332b23 .1 

Max- Forwards : 70 

From: <sip : scscfohomel . net >;tag=15 117 

To: <sip: pnmas .homel .net>;tag=31415 

Call -ID: dre3 6d2v32gnlgiiomm7244 5 

CSeq: 42 NOTIFY 

Subscript ion- St ate : active ;expires=600000 

Event : reg 

Content-Type : application/reginfo+xml 

Contact: <sip : scscf Ohomel . net> 

Content-Length: (...) 

<?xml version="l . 0" ?> 

<reginfo xmlns="urn: ietf :params :xml :ns : reginfo" 

xmlns :gr="urn: ietf :params :xml :ns :gruuinfo" 
version="l" state="full" > 

<registration aor="sip: PN_userl_publicl(ahomel .net " id="a7" state="active"> 
<contact id="76" state="active" event="registered" > 
<uri>sip : [5555 : : aaa :bbb : ccc : ddd] </uri> 
<allOneLine> 

<unknown-param name= ' +sip . instance ' >&;lt ;urn:uuid: f 81d4f ae-7dec-lld0-a765-0 0a0c91e6bf 6&;gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . icsi_ref ' >&;lt ;urn:urn-7 : 3gpp- service . ims . icsi .mmtel&gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . iari_ref ' >&;lt ;urn:urn-7 : 3gpp- application, ims . iari .pnm- 
controller&;gt"</unknown-param> 

<unknown-param name= ' +g. 3gpp . cs-audio ' > </unknown-param> 
<unknown-param name= ' +g. 3gpp . cs-video ' > </unknown-param> 
</allOneLine> 
<allOneLine> 

<gr :pub-gruu uri="sip : PN_userl_publicl@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf 6"/> 
</allOneLine> 

<gr : temp-gruu uri="sip : 8f fkasOBaf 7f asklzi9®homel .net ;gr" f irst-cseq="40"/> 
</contact> 

</registration> 

<registration aor="sip : PN_userl_public2@homel .net" id="a8" state="active" > 
<contact id="77" state=" active" event= " created" > 
<uri>sip : [5555 : : aaa : bbb : ccc :ddd] </uri> 
<allOneLine> 

<unknown-param name= ' +sip . instance ' >&;lt ;urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf 6&;gt ; ' </unknown-param> 

<unknown-param name= ' +g. 3gpp . iari_ref ' >&;lt ;urn:urn-7 : 3gpp- service, ims . icsi .mmtel&gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . cs-audio ' > </unknown-param> 
<unknown-param name= ' +g. 3gpp . cs-video ' > </unknown-param> 
</allOneLine> 
<allOneLine> 
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<gr :pub-gruu uri="sip : PN_userl_public2@homel .net ;gr=urn:uuid: f 81d4f ae-Tdec-lldO-aTes- 
OOaOcSleSbf 6'7> 

</allOneLine> 

<gr : temp-gruu uri="sip : 2k3e8f arf 7f lfka9zi9@homel .net ;gr" f irst-cseq="40"/> 
</contact> 
</registration> 
</reginf o> 



9. SIP 200 (OK) response (PNM AS to S-CSCF) 
lO.Sh-Pull(AStoHSS) 

For detailed message flows see 3GPP TS 29.328 [9] in subclause 6.1.1. 
11. Sh-Pull Response (HSS to PNM AS) 

As a successful verification, the PNM AS enrols the public user identity as registered in the database. 



A.3.3 Signalling flows for PN-configuration 
A.3.3.1 PN-configuration for PN UE recjirection 

Figure A.3.3. 1-1 shows the message exchange between PN UE and NAF/PNM AS when the PN UE wants to configure 
the PN settings for the PN UE redirection. The messaging only takes place after a successful bootstrapping procedure 
(as described in 3GPP TS 33.220 [8]) in which case the bootstrapped security association has been established before 
Step 1. 



PNUE 



NAF/PNM AS 



-1. PN-configuration request- 



2. Authentication and authrization 
Capability and subcription check 



3. PN-configuration response 

Figure A.3.3. 1-1: Successful PN-configuration for UE redirection 

1. Initial PN-configuration request (PN UE to NAF/PNM AS) - see example in table A.3.3.1-1 

The PN UE sends an HTTP request to the NAF/PNM AS containing the configuration request for the PN UE 
redirection. 

Table A.3.3.1-1 : Initial PN-configuration request (UE to NAF/PNM AS) 

PUT http : //xcap .homel .net/pnm. 3gpp . org/users/sip : PN_user_public@homel .net/pnm HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release- 6 3gpp-gba 

Content-Type: application/pnm+xml charset="utf -8" 

Content-Length: (...) 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: application/pnm+xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping@pnmas .homel .net" , 

nonce="a6332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="6629fae49393a05397450978507c4ef 1" , response=" 6629f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f30e41" , algorithm=MD5 

<?xml version="l . 0" encoding="utf -8" ?> 
<PNConf iguration> 
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<UERedirection UriOfRedirectedUser="sip : PN_userl_publicl@homel .net" > 
<RedirectedUserID> 

<PNUEID>sip:PN_userl_publicl@homel .net</PNUEID> 
<PNUEName>PN_userl_publicl_old</PNUEName> 
</RedirectedUserID> 
<RedirectingUserID id=l> 

<PNUEID>sip:PN_user2_publicl®homel .net</PNUEID> 
<PNUEName>PN_user2_publicl_old</PNUEName> 
<RedirectionLevel>application</RedirectionLevel> 
<RedirectionPrio>l< /Redirect ionPrio> 
</RedirectingUserID> 
</UERedirection> 
</PNConf iguration> 



Request-URI: The Request-URI (the URI that follows the method name, "PUT", in the first line) indicates the 

resource of this PUT request. The Request-URI contains the XCAP HTTP URI which indicates 
to the PNM AS the desired PN is requested to be configured. 

Host: Specifies the Internet host and port number of the PNM AS, obtained from the original URI 

given by referring resource. 

User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the application server (i.e., NAF) that the UE supports 3GPP- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

PNM AS was obtained. 

Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GPP TS 33.220 [8]). 

XML body: Contains the settings for the PN UE redirection that the PN-user request the PNM AS to do. In 

this example, the UE with public user identity <sip: PN_userl_publicl @homel.net > requests 
the PNM AS to configure the redirection of all sessions, addressing <sip: 
PN_user2_publicl @homel.net > with the PN UE name PN_user2_publicl_old, to <sip: 
PN_userl_publicl @homel.net > with the PN UE name PN_userl_publicl_old with a highest 
priority equal to one. 

2. Authentication/authorization and UE capability and subscription checking 

NAF/PNM AS verifies the Authorization header by using the bootstrapping transaction identifier B-TID and the 
key material Ks_NAF obtained from BSF (as described in 3GPP TS 33.220 [8]). NAF/PNM AS calculates the 
corresponding digest values using Ks_NAF, and compares the calculated values with the received values in the 
Authorization header. If the verification succeeds, the NAF passes the private user identity <sip: 
PN_userl_private@homel.net> associated with the public user identity <sip: PN_userl_publicl @homel.net> 
to the PNM AS. The PNM AS then authorizes the UE by comparing the received public user identity <sip: 
PN_userl_publicl @homel.net> with the preconfigured one identified by the private user identity <sip: 
PN_userl_private@homel.net>. If the authorization succeeds, the incoming request is taken in for further 
processing. 

The NAF/PNM AS also performs the PN UE capability and subscription checking. If the checking succeeds, the 
incoming request is taken in for further processing. 

NOTE: Performing the PN UE subscription checking entails the interaction with the HSS over the sh interface 
(see 3GPP TS 29.328 [9]) which is not shown in the message flow. 

3. Delivery of PN-configuration response (NAF/PNM AS to PN UE) - see example in table A.3.3-3 

The PNM AS sends HTTP 200 OK response to the PN UE to indicate the success of the PN-configuration. 

Table A.3.3.1-3: Delivery of PN-configuration response (NAF/PNM AS to PN UE) 



HTTP/1. 


1 200 OK 










Server: 


Apache/1.3.22 


(Unix) mod p 


srl/1.27 






Content 


-Length: 










Authentication-Info : 


qop=auth-int , 


rspauth= 


"6 629fae4 93 94a0 5 3 974 50 978 50 7c4efl", 


cnonce= 


"6629fae49393a 


05397450978507c4efl", 


nc=00000001 
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Date: Wed, 31 Oct 2007 10:50:3S GMT 
Expires: Wed, 31 Nov 2007 10:50:36 GMT 



Authentication-Info: This carries the protection. 

A.3.3.2 PN-configuration for PN access control 

Figure A.3.3.2-1 shows the message exchange between PN UE and NAF/PNM AS when PN UE wants to configure the 
PN settings for the PN access control service. The messaging only takes place after a successful bootstrapping 
procedure (as described in 3GPP TS 33.220 [8]) in which case the bootstrapped security association has been 
established before step 1 . 



PNUE 



NAF/PNM AS 



-1. PN-configuration request- 



2. Authentication and authrization 
and subscription check 



3. PN-configuration response 

Figure A.3.3.2-1: Successful initial PN-configuration for PN access control 

1. Initial PN-configuration request (PN UE to NAF/PNM AS) - see example in table A.3.3.2-1 

The PN UE sends an HTTP request to the NAF/PNM AS containing the configuration request for the PN access 
control. 



Table A.3.3.2-1 : Initial PN-configuration request (UE to NAF/PNM AS) 

PUT http : //xcap .homel .net/pnm. 3gpp .org/users/sip : PN_user_public@homel .net/pnm HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release- 6 3gpp-gba 

Content-Type: application/pnm+xml charset="utf -8" 

Content-Length: (...) 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: application/pnm+xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping@pnmas .homel .net" , 

nonce="a6332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="6629fae49393a05397450978507c4ef 1" , response="6629f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f30e41" , algorithm=MD5 

<?xml version="l . 0" encoding="utf -8" ?> 
<PNConf iguration> 

<AccessControl UriOf ControllerUE="sip : PN_userl_publicl@homel . com" > 
<ControllerUE> 

<PNUEID>sip: PN_userl_publicl@homel .net</PNUEID> 
<PNUEName>PN_userl_publicl_old</PNUEName> 
</ControllerUE> 
<ControlleeUE id=l> 

<PNUEID>sip: PN_user2_publicl@homel .net</PNUEID> 
<PNUEName>PN_user2_publicl_old</PNUEName> 

<PNAccessControlList>sip : PN_userl_f riend_publicl®homel . net 
sip : PN_userl_f riend_public2@homel . net</PNAccessControlList> 

<PNAccessControlType>Controller</PNAccessControlType> 
</ControlleeUE> 
</AccessControl> 
</PNConf iguration> 
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Request-URI: The Request-URI (the URI that follows the method name, "PUT", in the first line) indicates the 

resource of this PUT request. The Request-URI contains the XCAP HTTP URI which indicates 
to the PNM AS the desired PN is requested to be configured. 

Host: Specifies the Internet host and port number of the PNM AS, obtained from the original URI 

given by referring resource. 

User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the application server (i.e., NAF) that the UE supports 3GPP- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

PNM AS was obtained. 

Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GPPTS 33.220 [8]). 

XML body: Contains the settings for the PN access control service that the UE requests from the PNM AS. 

In this example, the UE with public user identity <sip: PN_userl_publicl @homel.net> 
requests the PNM AS to configure PN access control for all sessions, addressing <sip: 
PN_user2_publicl @ho mel.net > with the PN UE name PN_user2_publicl_old, except for the 
case when the callee is either <sip: PN_userl_friend_publicl @homel.net> or < sip: 
PN_userl_friend_public2@homel.net >. Furthermore, the UE indicates in the access control 
type that the controller UE with <sip: PN_userl_publicl @homel.net> and the PN UE name 
PN_userl_publicl_old needs to be interrogated when the PNM AS executes the PN access 
control. 

2. Authentication/authorization and subscription checking 

As described in Step 2 within Figure A. 3. 3. 1-1. 

3. Delivery of PN-configuration response (NAF/PNM AS to PN UE) - see example in table A.3.3.2-3 

The PNM AS sends HTTP 200 OK response to the PN UE to indicate the success of the PN-configuration. 

Table A.3.3.2-3: Delivery of PN-configuration response (NAF/PNM AS to PN UE) 



HTTP/1. 


1 200 OK 












Server: 


Apache/1 . 3 .22 


{Un 


LX) 


mod perl/1 .27 






Content 


-Length: 












Authentication- Info : 


qop = 


auth-int, rspauth= 


"6 62 9fae4 93 94a0 5 3 974 50 978 50 7c4efl", 


cnonce= 


"6 62 9fae4 93 93a0 53 974 50 97850 7c4efl", 


nc=00000001 




Date: Wed, 31 Oct 2007 10 


:50 


36 GMT 






Expires 


: Wed, 31 Nov 


2007 


10 


50:36 GMT 







Authentication-Info: This carries the protection. 

A.3.3.3 PN-configuration for cinanging PN UE name 

Figure A.3.3.3-1 shows the message exchange between PN UE and NAF/PNM AS when the PN UE changes the PN 
UE name. The messaging only takes place after a successful bootstrapping procedure (as described in 
3GPP TS 33.220 [8]) in which case a bootstrapped security association has been established before Step 1. 
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PNUE 



NAF/PNM AS 



-1. PN-configuration request- 



2. Authentication and authrization 
Capability and subcription check 



3. PN-configuration response 

Figure A.3.3.3-1: Successful PN-configuration for changing PN UE name 

1 . Initial PN-configuration request (PN UE to NAF/PNM AS) - see example in table A.3.3.3-1 

The PN UE sends an HTTP request to the NAF/PNM AS containing the configuration request for changing the 
PN UE name. 

Table A.3.3.3-1 : Initial PN-configuration request (UE to NAF/PNM AS) 

PUT http : //xcap .homel .net/pnm. 3gpp .org/users/sip : PN_user_public@homel .net/pnm HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release- 6 3gpp-gba 

Content-Type: application/pnm+xml charset="utf -8" 

Content-Length: (...) 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: application/pnm+xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping@pnmas .homel .net" , 

nonce="a6332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="6629fae49393a05397450978507c4ef 1" , response=" 6629f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f 30e41" , algorithm=MD5 

<?xml version="l . 0" encoding="utf -8" ?> 
<PNConf iguration> 
<Nameof PNUE> 

<PNUEID>sip:PN_userl_publicl@homel .net</PNUEID> 
<UEName id=l> 

<Name>PN_userl_publicl_new</Name> 
</NameofPNUE> 
</PNConf iguration> 



Request-URI: The Request-URI (the URI that follows the method name, "PUT", in the first line) indicates the 

resource of this PUT request. The Request-URI contains the XCAP HTTP URI which indicates 
to the PNM AS the desired PN is requested to be configured. 

Host: Specifies the Internet host and port number of the PNM AS, obtained from the original URI 

given by referring resource. 

User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the application server (i.e., NAF) that the UE supports 3GPP- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

PNM AS was obtained. 

Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GPP TS 33.220 [8]). 

XML body: Contains the old and the new PN UE names that the PN-user requests the PNM AS to change. 

In this example, the UE with public user identity <sip: PN_userl_publicl @homel.net > 
request the PNM AS to change the old PN UE name with the new PN UE name 
"PN_user 1 _public 1 _ne w" . 

2. Authentication/authorization and UE capability and subscription checking 



£75/ 



3GPP TS 24.259 version 9.0.0 Release 9 



33 



ETSI TS 124 259 V9.0.0 (2010-01) 



As described in Step 2 within figure A. 3. 3. 1-1. 

NOTE: Changing the PN UE name from PN_userl_publicl_old to PN_userl_publicl_new does not entail 
interaction between the PN MAS and the HSS over the Sh interface. 

3. Delivery of PN-configuration response (NAF/PNM AS to PN UE) - see example in table A.3.3.3-3 

The PNM AS sends HTTP 200 OK response to the PN UE to indicate the success of the PN-configuration. 

Table A.3.3.3-3: Delivery of PN-configuration response (NAF/PNM AS to PN UE) 



HTTP/1. 


1 200 OK 












Server: 


Apache/1 .3.2: 


{Un 


LX) 


mod perl/1 .27 






Content 


-Length: 












Authentication- Info : 


qop = 


auth-int, rspauth= 


"6 62 9fae4 9394a0 5 3 974 50 978 50 7c4efl", 


cnonce= 


'6 62 9fae4 93 93a0 5 3 974 5 978 5 7c4efl", 


nc=00000001 




Date: Wed, 31 Oct 2007 10 


:50 


3 6 GMT 






Expires 


: Wed, 31 Nov 


2007 


10 


50:36 GMT 







Authentication-Info: This carries the protection. 

A.3.3.4 PN-query 

Figure A.3.3.4-1 shows the message exchange between PN UE and NAF/PNM AS when PN UE wants to obtain the PN 
setting information from the PNM AS. The messaging only takes place after a successful bootstrapping procedure (as 
described in 3GPP TS 33.220 [8]) in which case the bootstrapped security association has been established before 
Step 1. 



PNUE 



PNM AS 



-1. PN-query request- 



Authentication and authrization 



-3. PN-query response- 



Figure A.3.3.4-1 : Successful PN-query 



1 . Initial PN-query request (PN UE to NAF/PNM AS) - see example in table A.3.3.4-1 

The PN UE sends an HTTP request to the NAF/PNM AS PN in order to obtain the PN setting information of the 
<UERedirection> with the attribute value "UriOfRedirectedUser= sip:PN_userl_publicl@homel.net". 

Table A.3.3.4-1 : Initial PN-query request (UE to NAF/PNM AS) 



GET 

http : //xcap .homel .net/pnm. 3gpp .org/users/sip : PN_user_public@homel .net/pnm/~~/PNConf iguration/UERedir 

ection%5b®UriOfRedirectedUser=%22sip: PN_userl_publicl@homel .net%22%5d HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release-6 3gpp-gba 

Content-Length: 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: application/pnm+xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping@pnmas .homel .net" , 

nonce="a6332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="6629fae49393a05397450978507c4ef 1" , response="6629f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f 30e41" , algorithm=MD5 
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Request-URI: The Request-URI (the URI that follows the method name, "PUT", in the first line) indicates the 

resource of this PUT request. The Request-URI contains the XCAP HTTP URI which indicates 
to the PNM AS the desired PN is requested to be queried. 

Host: Specifies the Internet host and port number of the PNM AS, obtained from the original URI 

given by referring resource. 

User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the application server (i.e., NAF) that the UE supports 3GPP- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

PNM AS was obtained. 

Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GPPTS 33.220 [8]). 

XML body: In this example, it is assumed that the UE with the public user identity < sip: 

PN_userl_public 1 @home 1 .net > interrogates the PNM AS for the whole set of the PN setting 
information. 

2. Authentication/authorization and UE capability 

See Step 2 described within Figure A. 3. 3. 1-1. 

3. Delivery of PN-query response (NAF/PNM AS to PN UE) - see example in table A.3.3.4-3 

The PNM AS sends HTTP 200 OK response to the PN UE to inform the whole set of the PN setting information 
for the <UERedirection> with the attribute value "UriOfRedirectedUser= sip:PN_userl_publicl@homel.net". 

Table A.3.3.4-3: Delivery of PN-query response (NAF/PNM AS to PN UE) 

HTTP/1.1 200 OK 

Server: Apache/1.3.22 (Unix) mod_perl/l . 27 

Content-Length: 

Authentication- Info: qop=auth-int , rspauth="6 62 9f ae4 93 94a0 53974 50 97850 7c4ef 1" , 

cnonce="6629fae49393a05397450978507c4ef 1" , nc=00000001 

Date: Wed, 31 Oct 2007 10:50:36 GMT 

Expires: Wed, 31 Nov 2007 10:50:36 GMT 

<?xml version="l . 0" encoding="utf -8" ?> 
<PNConf iguration> 

<UERedirection UriOfRedirectedUser="sip : PN_userl_publicl@homel .net" > 
<RedirectedUserID> 

<PNUEID>sip:PN_userl_publicl@homel . net</PNUEID> 
<PNUEName>PN_userl_publicl_old</PNUEName> 
</RedirectedUserID> 
<RedirectingUserID id=l> 

<PNUEID>sip:PN_user2_publicl@homel .net</PNUEID> 
<PNUEName>PN_user2_publicl_old</PNUEName> 
<RedirectionLevel>application</RedirectionLevel> 
<RedirectionPrio>l< /Redirect ionPrio> 
</RedirectingUserID> 
</PNConf iguration> 

Authentication-Info: This carries the protection. 

XML body: Indicates the whole set of the PN setting information related to the UE with the public user identity 

< sip: PN_userl_publicl@homel.net>. 



A.3.3.5 PN-deconfiguration 



Figure A. 3. 3. 5-1 shows the message exchange between PN UE and NAF/PNM AS when PN UE wants to deconfigure 
the PN settings for the UE redirection service and the PN access control service. The messaging only takes place after a 
successful bootstrapping procedure (as described in 3GPP TS 33.220 [8]) in which case the bootstrapped security 
association has been established before step 1 . 
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PNUE 



NAF/PNM AS 



-1. PN-deconfiguration request- 



2. Authentication and authrization 



<y- 



-3. PN-deconfiguration response- 



Figure A.3.3.5-1: Successful initial PN-deconfiguration 

1. Initial PN-deconfiguration request (PN UE to NAF/PNM AS) - see example in table A.3.3.5-1 

The PN UE sends an HTTP request to the NAF/PNM AS containing the configuration request to delete the 
<UERedirection> with the attribute value "UriOfRedirectedUser= sip:PN_userl_publicl@homel.net". 

Table A.3.3.5-1 : Initial PN-configuration request (UE to NAF/PNM AS) 

DELETE 

http : //xcap .homel .net/pnm. 3gpp . org/users/sip : PN_user_public@homel .net/pnm/~~/PNConf iguration/UERedir 

ection%5b@UriOfRedirectedUser=%22sip:PN_userl_publicl@homel .net%22%5d HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release-6 3gpp-gba 

Content-Length: 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: text/xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping@pnmas .homel .net" , 

nonce="a6332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="6629fae49393a05397450978507c4ef 1" , response=" 6629f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f30e41" , algorithm=MD5 

Request-URI: The Request-URI (the URI that follows the method name, "DELETE", in the first Une) 

indicates the resource of this DELETE request. The Request-URI contains the XCAP HTTP 
URI which indicates to the PNM AS the desired PN is requested to be configured. 

Host: Specifies the Internet host and port number of the PNM AS, obtained from the original URI 

given by referring resource. 

User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the application server (i.e., NAF) that the UE supports 3GPP- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

PNM AS was obtained. 

Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GPPTS 33.220 [8]). 

XML body: In this example, the UE with public user identity <sip: PN_userl_publicl @homeLnet> wants 

the PNM AS to delete the whole PN settings estabhshed before. 

2. Authentication/authorization and UE capability and subscription checking 

See Step 2 described within figure A.3.3.1-L 

3. Delivery of PN-configuration response (NAF/PNM AS to PN UE) - see example in table A.3.3.5-3 

The PNM AS sends HTTP 200 OK response to the PN UE to indicate the success of the PN-configuration. 



£75/ 



3GPP TS 24.259 version 9.0.0 Release 9 36 ETSI TS 1 24 259 V9.0.0 (201 0-01 ) 

Table A.3.3.5-3: Delivery of PN-configuration response (NAF/PNM AS to FN UE) 



HTTP/1. 


1 200 OK 












Server: 


Apache/1.3.22 {Un 


LX) 


mod_perl/l .27 






Content 


-Length: 












Authentication- Info : 


qop = 


auth-int, rspauth= 


="6629fae49394a05397450978507c4efl". 


cnonce= 


'662 9fae4 9393a053974 50 97850 7c4efl", 


nc=00000001 




Date: Wed, 31 Oct 2007 10 


:50 


3 6 GMT 






Expires 


: Wed, 31 Nov 


2007 


10 


50:36 GMT 







Authentication-Info: This carries the protection. 

A.3.4 Signalling flows for PN UE redirection 
A.3.4.1 PN UE redirection in the IIVI CN subsystem 

Figure A.3.4. 1-1 details the signalling flows for PN UE redirection in the IM CN subsystem. 
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Figure A.3.4.1-1 : Successful PN UE redirection: in the IM CN subsystem 

The steps prior to step 1 are according to the standard procedures specified in 3GPP TS 24.228 [10]. 

1. INVITE#1 request (I-CSCF#2 to S-CSCF#2) -see example in table A.3.4.1-1 

I-CSCF#2 forwards the INVITE request to S-CSCF#2 after invocation of User Location Query procedure. 

Table A.3.4.1-1 : INVITE (l-CSCF#2 to S-CSCF#2) 

INVITE sip: PN_user2_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP icscf2 .home2 .net;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .homel .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357;comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 65 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record- Route : <sip:scscfl .homel .net; lr>,<sip:pcscfl .homel .net ; lr> 

P-Asserted-Identity : "John Doe" <sip :userl_publicl@homel .net> 

Privacy: none 

From: <sip :userl_publicl@homel .net>; tag=17182 8 

To: <sip: PN_user2_publicl@home2 .net> 

Call- ID: Cb03a0s09a2sdfglkj 490333 

Cseq: 127 INVITE 

Supported: precondition, 10 Orel, gruu, 199 

Accept -Contact : * ; +g. 3gpp . icsi-ref="urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" 

P- Asserted- Service : urn: urn- 7 : 3gpp- service . ims .icsi .mmtel Contact : 

<sip :userl_publicl®homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a765-0 0a0c91e6bf 6>; 

+g. 3gpp . icsi_ref="urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" 

Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE, REFER, MESSAGE 

Accept: application/sdp, application/3gpp-ims+xml 

Content-Type: application/sdp 

Content-length: (...) 

v=0 

o=- 2987933615 2987933615 IN IP6 5555 :: aaa : bbb : ccc : ddd 

s = - 

c=IN IP6 5555 :: aaa: bbb: CCC: ddd 

t = 

m=audio 3456 RTP/AVP 97 96 

a=tcap:l RTP/AVPF 

a=pcfg:l t=l 

b=AS:25 .4 

a=curr:qos local none 

a=curr:qos remote none 

a=des:qos mandatory local sendrecv 

a=des:qos none remote sendrecv 

a=inactive 

a=rtpmap:97 AMR 

a=fmtp:97 mode-set=0 , 2 , 5 , 7; maxframes=2 

a=rtpmap:96 telephone-event 

2. SIP 100 (Trying) response 

3. Evaluation of initial filter criteria 

The S-CSCF#2 validates the service profile of this subscriber and evaluates the initial filter criteria. 

4. INVITE#1 request (S-CSCF#2 to PNM AS)- see example in table A.3.4.1-4 

Based on the evaluation of initial filter criteria, the S-CSCF#2 forwards the INVITE request with the Request- 
URI of the UE-1 to the PNM AS. 

Table A.3.4.1-4: INVITE (S-CSCF#2 to PNM AS) 

INVITE sip:PN__user2_publicl@home2 .net SIP/2.0 
Via: SIP/2. 0/UDP scscf2.home2 .net;branch=z9hG4bK240f34 .1, 
SIP/2 .0/UDP icscf2.home2.net;branch=z9hG4bK871yl2 .1, 
SIP/2 .0/UDP scscf 1. homel. net ;branch=z9hG4bK332b23 .1, 
SIP/2 . 0/UDP pcscf 1 .homel .net;branch=z9hG4bK240f 34 .1, 
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SIP/2. O/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 64 
Route: <sip :pnmas .home2 .net ; lr> 
Record- 
Route :<sip:scscf2 .home2 .net;lr>,<sip:icscfl .homel .net;lr>,<sip:scscfl .homel .net ; lr>, <sip :pcscf 1 .home 
.net; lr> 

P-Asserted- Identity : 
Privacy: none 

From: <sip :userl_publicl@homel .net>; tag=17182 8 
To: <sip: PN_user2_publicl@home2 .net> 
Call-ID: 
Cseq: 

Supported: precondition, lOOrel, gruu 
Accept-Contact : 
P-Asserted-Service : 
Contact : 
Allow: 
Accept : 
Content-Type : 
Content -length: (...) 



5. SIP 100 (Trying) response (PNM AS to S-CSCF#2) 

6. FN UE redirection control 

The PNM AS executes the FN UE redirection logic based on the PN-user"s FN configurations and decides to 
redirect the initial request to the default UE of the FN, e.g. to the UE-3. 

7. INVITE#2 request (PNM AS to S-CSCF#2) - see example in table A.3.4. 1-7 

As a result of the FN UE redirection logic execution, the FNM AS sends the redirected INVITE request with the 
Request-URI of the UE-2 public user identity to the S-CSCF#2. 



Table A.3.4.1-7: INVITE#2 (PNM AS to S-CSCF#2) 



INVITE sip:PN_user3_publicl@home2 .net SIP/2.0 
Via: SIP/2 .O/UDP pnmas.home2 .net; brach= z9hG4bK712z34 . 1, 
SIP/2 .O/UDP scscf2 .home2 . net ;branch=z9hG4bK764z87 . 1 , 
SIP/2 .O/UDP icscf2 .home2 .net ;branch=z9hG4bK871yl2 .1, 
SIP/2 .O/UDP scscfl. homel. net ;branch=z9hG4bK332b23 .1, 
SIP/2 . O/UDP pcscf 1 . homel . net ;branch=z9hG4bK24 Of 34 . 1 , 

SIP/2. O/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 63 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record-Route: <sip :pnmas . home2 . net> , <sip : scscf 2 .home2 .net ; lr>, <sip : icscfl .homel .net ; lr>, 
<sip: scscfl .homel .net; lr>,<sip:pcscfl .homel .net ; lr> 
P-Asserted- Identity : 
Privacy: 
From: 
To: 
Cseq: 
Call-ID: 

Supported : precondition, lOOrel , gruu, 199 , histinf o 
History- Info : <sip : PN_user2_publicl®home2 .net>; index=l, 
<sip : PN_user3_publicl@home2 . net> ; index=l . 1 
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Accept-Contact : 
P-Asserted-Service : 
Contact : 
Allow: 
Accept : 
Content-Type : 
Content-length: (...) 



8. SIP 100 (Trying) response (S-CSCF#2 to PNM AS) 

9. INVITE#2 request (S-CSCF#2 to S-CSCF#3) - see example in table A.3.4.1-9 

The S-CSCF#2 forwards the redirected INVITE request to the S-CSCF#3. The S-CSCF#2 and S-CSCF#3 can be 
the same entity. 



Table A.3.4.1-9: INVITE#2 (S-CSCF#2 to S-CSCF#3) 



INVITE sip:PN_user3_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP scscf 2 . home2 . net ;branch=z9hG4bK735zl2 . 1 , 

SIP/2. 0/UDP Pnmas.home2 .net;brach= z9hG4bK712z34 . 1 , 

SIP/2 .0/UDP scscf 2 .home2 .net ;branch=z9hG4bK764z87 . 1, 

SIP/2 .0/UDP icscfl.homel.net;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscf l.homel. net ;branch=z9hG4bK332b23 .1, 

SIP/2 .0/UDP pcscfl@homel. net ;branch=z9hG4bK240f 34.1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 62 

Route : <sip : scscf 3 . home2 . net ; lr> 

Record-Route: <sip : scscf 3 .home2 .net ; lr>, <sip :pnmas .home2 .net>, <sip : scscf 2 .home2 .net ; lr>, 

<sip:icscfl .homel .net; lr>, <sip:scscfl .homel .net; lr>, <sip:pcscfl .homel .net ; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Supported: 

Contact : 

Allow: 

Accept : 

Content-Type : 

Content-length: (...) 

v= 
o= 
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10. SIP 100 (Trying) response (S-CSCF#3 to S-CSCF#2) 

The S-CSCF#3 responds to the INVITE#3 request with a 100 Trying provisional response. 

11. INVITE#2 request (S-CSCF#3 to PNM AS) - see example in table A.3.4.1-11 

Based on the evaluation of initial filter criteria, the S-CSCF#3 forwards the INVITE request with the Request- 
URI of the UE-3 to the PNM AS. 

Table A.3.4.1-11 : INVITE#2 (S-CSCF#3 to PNM AS) 

INVITE sip:PN_user3_publicl®home2 .net SIP/2.0 

Via: SIP/2. 0/UDP scscf3.home2.net;branch=z9hG4bK735zl2 .1, 

SIP/2 . 0/UDP scscf2 .home2 . net ;branch=z9hG4bK735zl2 .1, 

SIP/2. 0/UDP Pnmas.home2 .net;brach= z9hG4bK712z34 . 1 , 

SIP/2 .0/UDP scscf2 .home2 .net ;branch=z9hG4bK764z87 . 1, 

SIP/2 .0/UDP icscf2 .home2 . net ;branch=z9hG4bK871yl2 .1, 

SIP/2 . 0/UDP pcscf 1 .homel .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 61 

Route: <sip :pnmas .home2 .net ; lr> 

Record- Route : <sip:scscf3 .home2 .net;lr>,<sip:scscf2 .home2 .net ; lr>, <sip :pnmas .home2 .net>, 

<sip : scscf 1 . home2 . net ; lr> , <sip : icscf 2 . home2 . net ; lr> , <sip : scscf 1 . homel . net ; lr> , 

<sip : pcscf 1 .homel .net ; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Accept : 

Content-Type : 

Content-length: (...) 



12. SIP 100 (Trying) response (PNM AS to S-CSCF#3) 

13. PN UE redirection control 
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The PNM AS executes the PN UE redirection control logic based on the PN-user"s PN configurations and 
decides to forward the request to S-CSCF#3 as the UE-3 is the default UE of the PN. 

14. INVITE#2 request (PNM AS to S-CSCF#3) - see example in table A.3.4.1-14 
Table A.3.4.1-14: INVITE#2 (PNM AS to S-CSCF#3) 

INVITE sip: PN_user3_publicl@home2.net SIP/2.0 

Via: SIP/2. 0/UDP pnmas.home2 .net;branch=z9hG4bK735zl2 .1, 

SIP/2 .0/UDP scscf3 .home2 .net ;branch=z9hG4bK735zl2 .1, 

SIP/2 .0/UDP scscf2 .home2 . net ;branch=z9hG4bK735zl2 .1, 

SIP/2. 0/UDP Pnmas.home2 .net;brach= z9hG4bK712z34 . 1 , 

SIP/2 .0/UDP scscf2 .home2 . net ;branch=z9hG4bK764z87 . 1 , 

SIP/2 .0/UDP icscf2 .home2 .net ;branch=z9hG4bK871yl2 .1, 

SIP/2 . 0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 

SIP/2. 0/UDP pcscf 1 .homel .net;branch=z9hG4bK240f 34 . 1 , 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max- Forwards : 60 

Route : <sip : scscf 3 . home2 . net ; lr> 

Record- Route : <sip :pnmas .home2 .net; lr>,<sip:scscf3 .home2 .net; lr>,<sip:scscf2 .home2 .net; lr>, 

<sip :pnmas .home2 .net>, <sip:scscf2 .home2 .net; lr>, <sip:icscf2 .home2 .net; lr>, 

<sip:scscfl .homel .net; lr>, <sip :pcscf lohomel .net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Accept : 

Content-Type : 

Content -length: (...) 

v= 
o= 
s= 
c= 
t= 
m= 
a= 
a= 
b= 
a= 
a= 



15. SIP 100 (Trying) response (S-CSCF#3 to PNM AS) 

16. INVITE#2 request (S-CSCF#3 to P-CSCF-#3) - see example in table A.3.4.1-16 

The S-CSCF#3 continues the redirected INVITE request based on the standard call setup procedures. 

Table A.3.4.1-16: iNVITE#2 (S-CSCF#3 to P-CSCF#3) 

INVITE sip: [5555 : :eee: fff :aaa:bbb] : 8805;comp=sigcomp SIP/2.0 
Via: SIP/2. 0/UDP scscfS .home2 .net;branch=z9hG4bK735zl2 .1, 
SIP/2 .0/UDP pnmas.home2 .net ;branch=z9hG4bK735zl2 .1, 
SIP/2 .0/UDP scscf 3 .home2 .net ;branch=z9hG4bK735zl2 .1, 
SIP/2 .0/UDP scscf 2 .home2 .net ;branch=z9hG4bK735zl2 .1, 
SIP/2. 0/UDP Pnmas.home2 .net;brach= z9hG4bK712z34 . 1 , 
SIP/2 . 0/UDP scscf 2 .home2 . net ;branch=z9hG4bK764z87 . 1 , 
SIP/2 . 0/UDP icscf2 .home2 . net ;branch=z9hG4bK871yl2 .1, 
SIP/2 . 0/UDP scscf 1 .homel .net; branch=z9hG4bK332b23 .1, 
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SIP/2 . 0/UDP pcscf 1 .homel .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 59 

Route: <sip: pcscf #3@home2 .net ; lr> 

Record-Route : <sip : scscf 3 . home2 . net ; lr> , 

<sip :pnmas .home2 .net; lr>,<sip:scscf3 .home2 .net;lr>,<sip:scscf2 .home2 .net ; lr>, <sip :pnmas .home2 .net>, 

<sip : scscf 2 . home2 . net ; lr> , <sip : icscf 2 . home2 . net ; lr> , <sip : scscf 1 . homel . net ; lr> , 

<sip : pcscf 1 .homel .net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Accept : 

P- Called- Party- ID : <sip : PN_user3_publicl@home2 .net> 

Content-Type : 

Content -length: (...) 

v= 
o= 
s = 
c= 
t= 
m= 



17. Steps 17 to 30 are identical to generic session setup procedure specified in 3GPP TS 24.228 [10]. 

A.3.4.2 PN UE redirection in tine CS domain 

Figure A. 3. 4. 2-1 provides the signaling flow for PN UE redirection in the CS domain. The GMSC will receive the ISUP 
containing calling party number and called party number. The gsmSCF will invoke the service logic in order to route 
the call to Default-UE. 
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Figure A.3.4.2-1 : Signalling flow for PN UE redirection in the CS domain 

1. ISUPIAM 

lAM message arrived at GMSC#1. Specifically for this signalling flow, the lAM includes: 

Called Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 
number = international number), (Number digits = 12415553333)] 

Calling Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 
number = international number), (Number digits = 121255511 1 1)] 

2. MAP Send Routing Information (SRI) (GMSC#1 to HSS) 

On receipt of the incoming call request, the GMSC queries the HSS for routing information 

3. Retrieval of PNM subscriber information 

The HSS provides information including the T-CSI information element that contains information configured for 
the PNM subscriber, identifying the subscriber as having terminating CAMEL services. The T-CSI IE also 
includes the gsmSCF address. 

4. MAP Send Routing Information Acknowledgement (SRI ACK) (HSS to GMSC#1) 

The HSS returns the T-CSI information element to the GMSC in response to the query for routing information 
(SRI). The GMSC now has the address of the gsmSCF. 

5. CAMEL IDP (GMSC to gsmSCF) 

The GMSC#1 triggers a CAMEL activity which results in sending a CAMEL IDP message to the GSM Service 
Control Function (gsmSCF). The CAMEL IDP message contains at least: 

the calling party number; 

the called party number; 

the type of call; and 

Information from the T-CSI IE received by the GMSC#1 in the SRI ACK from the HSS. This includes the 
CAMEL service key. 

6. The gsmSCF invokes PNM Redirection service logic to route the call. 
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7. CAMEL CONNECT (gsmSCF to GMSC#1) 

The CAMEL service function causes the gsmSCF to respond to the CAMEL IDP message with a CAMEL 
CONNECT message containing: 

The MSISDN of the Defauh UE: 12245678912 

8. lAM message arrived at GMSC#2 of Default UE. 

The lAM includes: 

Called Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 
number = international number), (Number digits = 12415553333)] 

Calling Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 
number = international number), (Number digits = 12125551 1 1 1)] 

9. ISUPIAM 

The call is routed to Default UE. 
10-12. ISUP ACM 

In response ACM is generated .There is no PNM specific content to this response. 
13-15. ISUP ANM 

The ANM is generated after terminating UE answer the call. There is no PNM specific content to this response. 

A.3.5 Signalling flows for PN access control 
A.3.5.1 PN access control procedure in IM CN subsystem 

Figure A.3.5. 1-1 details the signalling flows for PN access control in the IM CN subsystem. 
In the following flow UE#2a is the PN controller UE and UE#2b is the PN controllee UE. 
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Figure A.3.5.1-1 : Signalling flow for PN access control procedure in IM CN subsystem 
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The steps prior to Step 1 are according to the standard procedures specified in 3GPP TS 24.228 [10]. 

1. INVITE#1 (I-CSCF#2 to S-CSCF#2) 

I-CSCF-2 forwards the invite message to S-CSCF#2 after invocation of location Query. 

Table A.3.5.1-1 : SIP INVITE request (l-CSCF#2 to S-CSCF#2) 

INVITE sip:PN_user2b_publicl@home2 .net SIP/2.0 
Via: SIP/2. 0/UDP icscf2 . home 2 . net ;branch=z9hG4bK871yl2 .1, 
SIP/2. 0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 
SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 
Max- Forwards : 65 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record- Route :<sip:scscfl .homel .net; lr>,<sip:pcscfl .visited.net; lr> 
P-Asserted-Identity : "John Doe" <sip :userl_publicl@homel .net> 
Privacy: none 

From: <sip :userl_publicl@homel .net>; tag=15 78 93 
To : <sip : PN_user2b_publicl®home2 . net> 
Cseq: 127 INVITE 
Call-ID:13124 3vdse 

Supported : precondition, lOOrel , gruu, 199 

Accept -Contact : * ; +g . 3gpp . icsi-ref="urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" 
P- Asserted- Service : urn: urn- 7 : 3gpp- service. ims .icsi .mmtel 

Contact : <sip :userl_publicl@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf6>;+g. 3gpp . icsi -ref="urn%3Aurn-7%3A3gpp- service . ims .icsi .mmtel" 
Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE, REFER, MESSAGE 
Accept: application/sdp, application/3gpp-ims+xml 
Content-Type: application/sdp 
Content-length: (...) 

v=0 

o=- 2987933615 2987933615 IN IP6 5555 :: aaa : bbb : ccc : ddd 

s = - 

c=IN IP6 5555 :: aaa: bbb: CCC: ddd 

t = 

m=audio 3456 RTP/AVP 97 96 

a=tcap:l RTP/AVPF 

a=pcfg:l t=l 

b=AS:25 .4 

a=curr:qos local none 

a=curr:qos remote none 

a=des:qos mandatory local sendrecv 

a=des:qos none remote sendrecv 

a=inactive 

a=rtpmap:97 AMR 

a=fmtp:97 mode-set=0 , 2 , 5 , 7; maxframes=2 

a=rtpmap:96 telephone-event 

2. 100 Trying 

S-CSCF#2 responds to the 1NV1TE#1 request with a 100 Trying provisional response. 

Table A.3.5.1-2: SIP 100 Trying 

SIP/2.0 100 Trying 

Via: SIP/2. 0/UDP icscf2 .home2 .net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscf 1. homel. net ;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

From: 

To: 

Call-ID: 

CSeq: 

Content-Length: 

3. Evaluation of Initial Filter Criteria 

S-CSCF#2 validates the service profile of this subscriber and evaluates the initial filter criteria. 

4. INVITE#1(S-CSCF#2 to PNM AS) 
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S-CSCF#2 forwards the INVITE#1 request to PNM AS based upon the initial filter criteria (IPCs). 
Table A.3.5.1-4: SIP INVITE request (S-CSCF#2 to PNM AS) 



INVITE sip:PN_user2b_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP scscf 2 . home2 . net ;branch=z9hG4bwt871yl2 . 1 , 

SIP/2 .0/UDP icscf2 .home2 . net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscf l.homel. net ;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 64 

Route: <sip :pnmas .home2 .net ; lr> 

Record- Route : <sip:scscf2 .homel .net; lr>,<sip:scscfl .homel .net; lr>, <sip : pcscf 1 .visited.net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Accept : 

Content-Type : 

Content -length: (...) 

v= 
o= 
s = 
c= 
t= 



5. 100 Trying 

PNM AS responds to the INVITE#1 request with a 100 Trying provisional response. 

Table A.3.5.1-5: SIP 100 Trying 
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6. PN access control 

PNM AS invokes the Private network service logic. As userl_publicl @homel.net is not on the 
<PNAccessControlList> ofPN_user2b_publicl@home2.net and that the PN access controller needs to be 
contacted. 

7. INVITE#2 (PNM AS to S-CSCF#2) 
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PNM AS generates a new INVITE request message called INVITE#2 and sends it to S-CSCF#1 in order to 
interact with PN controller UE. 

Table A.3.5.1-7: SIP INVITE request (PNM AS to S-CSCF#2) 

INVITE sip:PN_user2a_publicl@home2 .net ; target=PN_user2b_publicl@home2 .net SIP/2 . 

Via: SIP/2. 0/UDP pnmas .home2 .net;branch=z9hG4bwt871yl2 . 1 

Max- Forwards : 70 

Route : <sip : scscf 2 . home2 . net ; lr> 

P-Asserted-Identity : "John Doe" <sip :userl_publicl@homel .net> 

Privacy: 

From: <sip : pnmas .homel .net>; tag=r3rw33 

To : <sip : PN_user2a_publicl®home2 . net> 

Cseq: 

Call-ID: 

Supported: precondition, lOOrel, 199, histinfo 

Contact: <sip :pnmas . home2 . net> 

History- Info : <sip : PN_user2b_publicl@home2 .net>; index=l, 

<sip : PN_user2a_publicl@home2 . net ; target=PN_user2b_publicl®home2 . net> ; index=l . 1 

Accept -Contact : * ; +g. 3gpp . iari-ref="urn%3Aurn-7%3A3gpp- application. ims . iari .pnm- controller" 

P-Asserted-Service : 

Allow: 

Accept : 

Content-Type : 

Content -length: (...) 



Request-URI: contains the URI of the PN controller UE (PN_user2a_publicl @home2.net) obtained from the 

<PNController> element along with the target uri-parameter which contains the URI from the 
original Request-URI (PN_user2b_publicl@home2.net). 

P-Asserted-Identity: the identity of the originator ("John Doe" <sip:userl_publicl@homel.net>). 

From: contains the SIP URI of the PNM AS (sip: pnmas.homel.net). 

To: contains the URI of the PN controller UE ( PN_user2a_publicl @ho me2.net). 

Supported: contains the following option tags: precondition, lOOrel, 199, histinfo. 

Contact: a SIP URI that contains the IP address or FQDN of the PNM AS. 

History-Info: contains the URIs from the original Request-URI (PN_user2b_publicl @home2.net) and the 

URI of the PN controller UE (PN_ user2a_publicl @ho me2.net) 

Accept-Contact: contains the g.3gpp.iari-ref media feature tag with the IARI value "urn%3Aurn-7%3A3gpp- 
application.ims .iari.pnm-controller" . 

8. 100 Trying 

S-CSCF#2 responds to the INVITE#2 request with a 100 Trying provisional response. 



£75/ 



3GPP TS 24.259 version 9.0.0 Release 9 50 ETSI TS 1 24 259 V9.0.0 (201 0-01 ) 

Table A.3.5.1-8: SIP 100 Trying 



SIP/2.0 100 Trying 

Via: SIP/2. 0/UDP pnmas .home2 .net;branch=v7hG4bwtl71yl2 . 1 

To: 

Call-ID: 

CSeq: 

Content-Length: 



9. INVITE#2 (S-CSCF#2 to P-CSCF#2a) 

S-CSCF#2 forwards the INVITE#2 request to P_CSCF#2a. 

Table A.3.5.1-9: SIP INVITE request (S-CSCF#2 to P-CSCF#2a) 



INVITE sip: [5555 : :eee: fff :aaa:bbb] : 8805;comp = sigcomp SIP/2.0 

Via: SIP/2. 0/UDP scscf 2 . home2 . net ;branch=z9hG4bwt871yl2 . 1 , 

SIP/2 . 0/UDP pnmas .home2 .net ;branch=z9hG4bwt871yl2 . 1 

Max- Forwards : 69 

Route : <sip:pcscf2a . visited2 .net ; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

Contact : 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Allow: 

Accept : 

P- Called- Party- ID : <sip : PN_user2a_publicl®home2 .net /target =PN_user2b_publicl®home2 .net> 

Content-Type : 

Content -length: (...) 

v= 
o= 
s = 



10. 100 Trying 

P-CSCF#2a responds to the INVITE#2 request with a 100 Trying provisional response. 

Table A.3.5.1-10: SIP 100 Trying 



SIP/2.0 100 
Via: SIP/2. 
SIP/2. 0/UDP 
To: 


Trying 
0/UDP scscf2 
pnmas .home 2 


home 2 .net ; 
net /branch 


branch=z9hG4bwt8 71yl2 
=z9hG4bwt871yl2.1 


1, 


Call-ID: 














CSeq: 
Content-Length: 













11. INVITE #2 (P-CSCF#2a to UE-2a) 
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P-CSCF#2a sends the INVITE#2 to UE-2a (controller UE) 

Table A.3.5.1-11 : SIP INVITE request (P-CSCF#2a to UE-2a) 



INVITE sip: [5555 : :eee : fff :aaa:bbb] : 8805;comp = sigcomp SIP/2.0 

Via: SIP/2. 0/UDP pcscf 2a . visited2 . net ;branch=z9hG4bK240f 34 . 1 , 

SIP/2. 0/UDP scscf2 .home2 .net ;branch=z9hG4bwt871yl2 .1, 

SIP/2 . 0/UDP pnmas .homel .net ;branch=k9hG4bwt871yl2 . 1 

Max- Forwards : 68 

Record- Route : <sip : pcscf 2a . visited2 .net ; lr>, 

<sip : scscf 2 . home2 . net ; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Require : 

Supported: 

Contact : 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Allow: 

Accept : 

P-Called-Party-ID: 

Content-Type : 

Content-length: (...) 

v= 
o= 
s = 



12. 100 Trying 

UE-2a responds to the INVITE#2 request with a 100 Trying provisional response. 

Table A.3.5.1-12: SIP 100 Trying 



SIP/2.0 100 Try: 


ng 












Via: SIP/2. 0/UDP 


scscf 2 . 


home 2 


.net 


branch=z9hG4bwt8" 


lyl2.1, 


SIP/2. 0/UDP pnmas. home2 


.net ; 


branch: 


=v7hG4bwtl71yl2 


1 


To: 














Call-ID: 














CSeq: 














Content-Length: 
















13. PNM Privacy Decision 

Based upon the lARI value PN controller UE invokes the FN controller application. The PN controller 
application provides the originators identity from the P-Asserted-Identity header, the PN controllee UE identity 
from the target URI-parameter in the Request-URI to the user and provides the option to the user to: 

1 . Forward the session to the controllee UE 

2. Reject the session 
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3. Accept the session 
In the example the user determines to forward the sesssion to the controllee UE. 
14. 302 Moved Temporarily 

PN controllee UE sends a SIP 302 Moved Temporarily response to pcscf2a.visited2.net. 

Table A.3.5.1-14: SIP 302 Moved Temporarily 



SIP/2.0 302 Moved Temporarily 

Via: SIP/2. 0/UDP pcscf 2 . visited2 . net ;branch=z9hG4bK240f 34 . 1 , 

SIP/2 . 0/UDP scscf2 .home2 .net ;branch=z9hG4bwt871yl2 .1, 

SIP/2 . 0/UDP pnmas .home2 .net ;branch=k9hG4bwt871yl2 . 1 

From: 

To: 

Call-ID: 

CSeq: 

History- Info : <sip : PN_user2b_publicl®home2 .net>; index=l, 

<sip : PN_user2a_publicl@home2 . net ; target=PN_user2b_publicl@home2 . net> ; index=l . 1 

Contact : <sip : PN_user2b_publicl@home2 . net> 

Content-Length: 



Contact: a URI that contains the address of the PN controllee UE (PN_user2b_publicl @home2.net). 

History-info: contains the URIs from the History-Info header in the original INVITE (PN_ 

user2b_publicl @home2.net and PN_user2a_publicl @home2.net). 

15. 302 Moved Temporarily 

P-CSCF#2a forward the 302 Moved Temporarily response to S-CSCF#2. 

Table A.3.5.1-15: SIP 302 Moved Temporarily 



SIP/2.0 200 OK 

Via: SIP/2. 0/UDP scscf2 .home2 .net;branch=z9hG4bwt871yl2 .1, 

SIP/2 . 0/UDP pnmas .home2 .net ;branch=k9hG4bwt871yl2 . 1 

From: 

To: 

Call-ID: 

CSeq: 

History-Info : 

Contact : 

Content-Length : 



16. 302 Moved Temporarily 

S-CSCF#2 forwards the 200 OK to PNM AS. 



Table A.3.5.1-16: SIP 302 Moved Temporarily 



SIP/2.0 200 OK 


via: SIP/2. 0/UDP pnmas. home2.net;branch=k9hG4bwt871yl2.1 


From: 


To: 


Call-ID: 


CSeq: 


History-Info : 


Contact : 


Content-Length: 



17. PN UE redirection 

Upon receiving the 302 Moved Temporarily response from the controller UE, the PNM AS determines the 
session is to be redirected to the controllee UE. 

18. INVITE#3 (PNM AS to S-CSCF#2) 
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PNM AS forwards the Originating INVITE message to S-CSCF#2. 

Table A.3.5.1-18: SIP INVITE request (PNM AS to S-CSCF#2) 

INVITE sip:PN_user2b_publicl@home2 .net SIP/2.0 
Via: SIP/2 . 0/UDP pnmas . home2 .net ;branch=z9hG4bwt871yl2 . 1 
SIP/2 .0/UDP scscf2 .home2 .net ;branch=z9hG4bwt871yl2 .1, 
SIP/2 .0/UDP icscf2 .home2 . net ;branch=z9hG4bK871yl2 .1, 
SIP/2 .0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 
SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 63 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record- Route : <sip:scscf2 .homel .net; lr>,<sip:scscfl .homel .net; lr>,<sip:pcscfl.visited.net;lr> 
P-Asserted-Identity : "John Doe" <sip :userl_publicl®homel .net> 
Privacy: 

From: <sip :userl_publicl@homel .net>; tag=157893 
To : <sip : PN_user2_publicl@home2 . net> 
Cseq: 
Call-ID: 

Supported: precondition, lOOrel, 199, histinfo 

Contact : <sip : userl_publicl®homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf6>;+g. 3gpp . icsi-ref ="urn%3Aurn- 7 %3A3gpp- service. ims . icsi .mmtel" 
History- Info : <sip : PN_user2b_publicl@home2 .net>; index=l, 

<sip : PN_user2a__publicl@home2 . net ; target=PN_user2b_publicl@home2 . net> ; index=l . 1 , 
<sip : PN_user2b_publicl@home2 .net?Reason=SIP;cause=3 02>; index=l . 2 
Accept -Contact : * ;g. 3gpp. icsi-ref ="urn%3Aurn- 7 %3A3gpp- service . ims .icsi .mmtel" 
P-Asserted-Service : 
Allow: 

Content-Type : 
Content -length: (...) 



Request-URI: contains the URI of the PN controller UE (PN_user2a_publicl @home2.net) obtained from the 

<PNController> element along with the target uri-parameter which contains the URI from the 
original Request-URI (PN_user2b_publicl@home2.net). 

P-Asserted-Identity: the identity of the originator ("John Doe" <sip: userl_publicl @homel .net>). 

From: contains the SIP URI of the PNM AS (sip: pnmas.homel.net). 

To: contains the URI of the PN controller UE (PN_user2a_publicl @home2.net). 

Supported: contains the following option tags: precondition, lOOrel, 199, histinfo 

Contact: the contents of the Contact header in the original INVITE (<sip: 

Userl_publicl@homel.net;gr=urn:uuid:f81d4fae-7dec-lld0-a765-00a0c91e6bf6>). 

History-info: contains the URIs from the History-Info header in the 302 Moved Temporarily response 

(PN_user2b_publicl @home2.net and PN_user2a_publicl @home2.net) with the addition of the 
URI of the PN controllee UE (PN_user2b_publicl @ho me2.net) from the Contact header in the 
302 Moved Temporarily response along with the reason code 302 
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Accept-Contact: contains the g.3gpp.icsi-ref media feature tag with the ICSI value from the Accept-Contact 
header in the original INVITE ("urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel") 

19-34. These flows follow the standard session establishment procedures specified in 3GPP TS 24.228 [10]. 

A.3.5.2 PN access control procedure in CS domain. 

Figure A. 3. 5. 2-1 provides the signalling flows for the PN access control procedure in CS domain. PN access control 
services deal with a user having access control over its personal network. 
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Figure A.3.5.2-1 Signalling flow for PN access control in the CS domain 

1. ISUPIAM 

Call Request containing an lAM message arrived at the GMSC. 
Specifically for this signalling flow, the lAM includes: 

- Calling Party number =12134587692 

- Called Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 

number = international number), (Number digits = 15346789043)] 



£75/ 



3GPP TS 24.259 version 9.0.0 Release 9 55 ETSI TS 1 24 259 V9.0.0 (201 0-01 ) 

2. MAP Send Routing Information (SRI) 

On receipt of the incoming call request, the GMSC queries the HSS for routing information. 

3. Retrieval of PNM subscriber information 

The HSS identifies the subscriber as a PNM subscriber and provides the configured terminated CAMEL 
subscription information (T-CSI) towards the GMSC in the SRI-ACK. 

4. MAP Send Routing Information Acknowledgement (SRI ACK) 

The HSS returns the T-CSI information element which includes the gsmSCF address to the GMSC in response 
to the query for routing information (SRI). 

5. CAMEL IDP (GMSC to gsmSCF) 

The GMSC#1 triggers a CAMEL activity which results in sending a CAMEL IDP message to the GSM Service 
Control Function (gsmSCF). The CAMEL IDP message contains at least: 

the calling party number; 

the called party number; 

the type of call; and 

- information from the T-CSI IE received by the GMSC#1 in the SRI ACK from the HSS. This includes 
the CAMEL service key. 

6. PN access control 

The gsmSCF performs the PN access control. Since the calling party is not configured in the PN access control 
list, the gsmSCF needs to ask the controller UE to grant the access to the calling party. 

7-8. MAP-UNSTRUCTURED-SS-REQUEST (gsmSCF to HSS) 

As part of this process the gsmSCF starts the timer to supervise the call establishment and send a MAP- 
UNSTRUCTURED-SS-REQUEST message to the HSS. The message contains the following information. 

USSD String:- Calhng Number 12134587692 and called Number 15346789043. 

9. MAP-UNSTRUCTURED-SS-REQUEST (HSS to MSC/VLR) 

The HSS relays the USSD request message to the MSC/VLR. It contains the following information. 
USSD String:- CalHng Number 12134587692 and called Number 15346789043. 

10. REGISTER (MSCA'LR to controller UE) 

This message is used between MSCA'LR and the UE to get the access granted for the incoming call. It contains 
the following information. 

Facility (Invoke=UNSTRUCTURED-SS-REQUEST(USSD-Data-Coding-Scheme, USSD String)) 

11-13. When the timer expires, the gsmSCF generates play announcement message containing Tone ID and 
Duration parameters as specified in 3GPP TS 29.078 [13]. 

14. FACILITY (controller UE to MSC/VLR) 

The controller UE will send the FACILITY message back to the MSC/VLR. It contains the following 
information. 

Facility (ReturnResult=UNSTRUCTURED-SS-REQUEST (USSD-Data-Coding-Scheme, USSD String)) 
which inform that call is accepted. 

15-16. MAP-UNSTRUCTURED-SS-REQUEST-Ack (MSC/VLR to HSS) 

After receiving the FACILITY message from the controller UE, the MSC/VLR send an USSD message towards 
the gsmSCF via the HSS. It contains the following information. 
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Facility (ReturnResult=UNSTRUCTURED-SS-REQUEST(USSD-Data-Coding-Scheme, USSD String)) 

17. As user responds, the gsmSCF stops playing announcement by sending DisconnectForwardConnection message 
to GMSC. 

NOTE: If the user responds before the timer started in step 7 expires, steps 12, 13 & 17 are skipped. 

18. Call Continue/Release Call (HSS to GMSC) 

Based on the response of the controller UE the gsmSCF sends a CAMEL CONTINUE or CAMEL RELEASE 
message to the GMSC. 

19-20. MAP Send Routing Information (SRI) 

On receipt of call continue message, the GMSC queries again the HSS for the routing information for the called 
party but this time with the parameter Suppress T-CSI. 

ll.MAPSRIAck 

The HSS executes the roaming number enquiry procedure and sends this information back to the GMSC within 
the SRI-Ack containing MSRN=15346787943. 

22. Call setup 

The GMSC starts the normal call setup towards the visited MSC of the called party to establish the call. 

A.3.6 Signalling flows for interdomain networking 
A.3.6.1 IIVI CN subsystem to CS domain 

Figure A.3.6-1 details the signaling flows for inter-domain networking from IM CN to CS domain. 
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Figure A.3.6-1: interdomain networking: (IIV! CN-CS) 

1. INVITE request (I-CSCF#2 to S-CSCF#2) 

UE initiates the INVITE request with the request-URI of the UE-1 to the IM CN subsystem entities. 
There is no PNM specific content to this request. 

Table A.3.6-1 -1 : INVITE request (l-CSCF#2 to S-CSCF#2) 

INVITE sip:PN_user2_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP icscf2 . home 2 . net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 65 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record- Route :<sip:scscfl .homel .net; lr>,<sip:pcscfl.visited.net;lr> 

P-Asserted-Identity : "John Doe" <sip :userl_publicl@homel .net> 

Privacy: none 

From: <sip :userl_publicl@homel .net>; tag=15 78 93 

To : <sip : PN_user2_publicl@home2 . net> 

Cseq: 127 INVITE 

Call-ID:13124 3vdse 

Supported : precondition, lOOrel , gruu, 199 

Accept -Contact : * ; +g. 3gpp . icsi-ref="urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" 

P- Asserted- Service : urn: urn- 7 : 3gpp- service. ims .icsi .mmtel 

Contact : <sip :userl_publicl®homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lldO-a765-OOaOc91e6bf 6g. 3gpp . icsi- 

ref ="urn%3Aurn-7%3A3gpp-service . ims . icsi .mmtel" 

Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE, REFER, MESSAGE 

Accept: application/sdp, application/3gpp-ims+xml 
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Content-Type: application/sdp 
Content -length: (...) 

v=0 

o = - 2987933615 2987933S15 IN IPS 5555 : : aaa :bbb : ccc : ddd 

s = - 

c=IN IP6 5555 :: aaa: bbb: CCC: ddd 

t = 

m=audio 3456 RTP/AVP 97 96 

a=tcap:l RTP/AVPF 

a=pcfg:l t=l 

b=AS:2 5.4 

a=curr:qos local none 

a=curr:qos remote none 

a=des:qos mandatory local sendrecv 

a=des:qos none remote sendrecv 

a=inactive 

a=rtpmap:97 AMR 

a=fmtp:97 mode-set=0 , 2 , 5 , 7; maxframes=2 

a=rtpmap:96 telephone-event 



2. SIP 100 (Trying) response 

S-CSCF#2 responds to the INVITE#1 request with a 100 Trying provisional response. 

3. Evaluation of initial filter criteria 

S-CSCF#2 validates the service profile of this subscriber and evaluates the initial filter criteria. 

4. INVITE#1 request (S-CSCF#2 to PNM AS) 

S-CSCF#2 forwards the INVITE#1 request to PNM AS based upon the initial filter criteria (IPCs). 

Table A.3.6-1-4: INVITE request (S-CSCF#2 to PNM AS) 

INVITE sip:PN_user2_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP scscf 2 . home2 . net ;branch=z9hG4bwt871yl2 . 1 , 

SIP/2 .0/UDP icscf2 .home2 . net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscf l.homel. net ;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 64 

Route: <sip :pnmas .home2 .net ; lr> 

Record- Route : <sip:scscf2 .homel .net; lr>,<sip:scscfl .homel .net; lr>, <sip : pcscf 1 .visited.net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Content-Type : 

Content-length: (...) 
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5. SIP 100 (Trying) response (PNM AS to S-CSCF#2) 

The PNM AS responds to the INVITE#1 request with a 100 Trying provisional response. 
There is no PNM specific content to this response. 

6. PNM session redirection service control 

The PNM AS executes the PNM redirection service control logic in order to route the call to the default UE 
located in CS domain. 

In this example the MSISDN of the called party is +1237654799942 

7. Steps 7 to 26 are identical to generic session setup procedure specified in 3GPP TS 24.228 [10]. 

A.3.6.2 CS domain to IM CN subsystem 

Figure A.3.6-2 shows the signaling flows for inter-domain networking from CS to IM CN subsystem. 
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Figure A.3.6-2: Inter-domain networking: (CS-IM CN) 

1. ISUP lAM (coming from the originating PLMN through the CS domain) 

In this example, a call request (ISUP lAM) makes an entry from the PLMN of the originating user (calling party) 
into the home PLMN of the terminating user (called party). The first entry point of the PLMN of the terminating 
user is the Gateway MSC (GMSC). The call request is a form of an ISUP lAM (Initial Address Message) and 
contains the called party number (MSISDN). 

In this example the MSISDN of the called party is +12134567897 

2. MAP Send Routing Information (SRI) (GMSC to HSS) 
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On receipt of incoming call request, GMSC queries the HSS for routing information. 

3. Retrieval of PNM subscriber information 

The HSS provides information including the T-CSI information element that contains information configured for 
the PNM subscriber, identifying the subscriber as having terminating CAMEL services. The T-CSI IE also 
includes the gsmSCF address. 

4. MAP send routing information acknowledgement (SRI ACK) (HSS to GMSC) 

The HSS returns the T-CSI information element to the GMSC in response to the query for routing information 
(SRI). The GMSC now has the address of the gsmSCF. 

5. CAMEL IDF (GMSC to gsmSCF) 

The GMSC triggers a CAMEL activity which results in sending a CAMEL IDP message to the GSM service 
control function (gsmSCF). The CAMEL IDP message contains at least: 

the calling party number; 

the called party number; 

the type of call; and 

- information from the T-CSI IE received by the GMSC in the SRI ACK from the HSS. This includes the 
CAMEL service key. 

6. Reroute to IMS determination 

The gsmSCF invokes PNM redirection service logic to determine whether the call needs to be rerouted to default 
UE located in IM CN subsystem for UE redirection. 

7. CAMEL CONNECT (gsmSCF to GMSC) 

The CAMEL service function causes the gsmSCF to respond to the CAMEL IDP message with a CAMEL 
CONNECT message containing 

MSISDN of default UE: 12134567897 

8. IAM#2(GMSC to MGCF) 

GMSC will generate the IAM#2 containing the MSISDN of default UE at which the call is to be redirected and 
signals to the MGCF. 

MSISDN of defauhUE: 12134567897 

9. SIP INVITE (MGCF to S-CSCF) 

The MGCF interworks the lAM into the appropriate SIP message and initiates the SIP INVITE request towards 
the S-CSCF via the intermediate IM CN subsystem entities. 

(MGCF towards the S-CSCF through the intermediate IM CN subsystem entities) - see example in table A.3.Y1 
Table A.3.6-2-9: SIP INVITE request (MGCF to S-CSCF) 

INVITE tel 1+12134567897 SIP/2.0 

Via: SIP/2. 0/UDP mgcf. homel.net ; branch=z9hG4bK779s24 .0 

Max-Forwards: 69 

Route : <sip : icscf 1 . homel . net ; lr> 

P-Asserted- Identity: <tel:+l-212-555-llll> 

P-Charging-Vector : icid-value="AyretyU0dm+6O2IrT5tAFrbHLso=023551024" ; orig-ioi=homel .net 

Privacy: none 

From: <tel: +1-212- 555 -llll>;tag=171828 

To: <tel:+ 12134567897> 

Call -ID: Cb03a0s09a2sdfglkj 490333 

Cseq: 127 INVITE 

Supported: precondition, lOOrel 

Accept -Contact : * ; +g. 3gpp . icsi-ref="urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" 

P- Asserted- Service : urn: urn- 7 : 3gpp- service . ims .icsi .mmtel 
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Contact : <sip :mgcf 1 .homel .net>; +g. 3gpp . icsi-ref="urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" 
Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE 
Content-Type: application/sdp 
Content-Length: (...) 

v=0 

o = - 2987933S15 2987933S15 IN IPS 5555 : : aaa :bbb : ccc : ddd 

s = - 

c=IN IP6 5555 :: aaa: bbb: CCC: ddd 

t = 

m=audio 3456 RTP/AVP 97 96 

a=tcap : 1 RTP/AVPF 

a=pcfg:l t=l 

b=AS:2 5.4 

a=curr:qos local sendrecv 

a=curr:qos remote none 

a=des:qos mandatory local sendrecv 

a=des:qos none remote sendrecv 

a=inactive 

a=rtpmap:97 AMR 

a=fmtp:97 mode-set=0 , 2 , 5 , 7; maxframes=2 

a=rtpmap:96 telephone-event 

10. SIP 100 (Trying) response (S-CSCF to MGCF via intermediate IM CN subsystem entities) 

The S-CSCF responds to the intermediate IM CN subsystem entities with a SIP 100 (Trying) response. 

11. INVITE - S-CSCF forwards the INVITE request to the default UE. 

12. Steps 12 to 21 are identical to generic session setup procedure specified in 3GPP TS 24.228 [10]. 



A.4 Example XML document 
A.4.1 Introduction 

Table A.4. 1-1 shows an example of an XML document compliant to the XML schema defined in annex B. All line 
feeds within element contents are for display purposes only. 

Table A.4.1 -1 : Example XML document 

<?xml version="l . 0" encoding="utf -8" ?> 

<PNConf iguration xxmlns="uri : 3gpp :pnm" xmlns :xsi="http: //www.w3 . org/2 001/XMLSchema- instance" > 
<UERedirection UriOfRedirectedUser="sip : PN_userl_publicl@homel . com"> 
<RedirectedUserID> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_1 < / PNUEName > 
</RedirectedUserID> 
<RedirectingUserID id=l> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_2 < / PNUE I D > 

<RedirectionLevel>application</RedirectionLevel> 
<RedirectionPrio>l< /Redirect ionPrio> 

</RedirectingUserID> 
<RedirectingUserID id=2> 

<PNUEID>sip : PN_userl_publicl®homel . com</PNUEID> 

< PNUEName > PN_3 < / PNUEName > 

<RedirectionLevel>application</RedirectionLevel> 
<RedirectionPrio>2</RedirectionPrio> 

</RedirectingUserID> 
</UERedirection> 
<AccessControl UriOf ControllerUE="sip : PN_userl_publicl@homel . com" > 

<ControllerUE> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_1 < / PNUE I D > 
</ControllerUE> 
<ControlleeUE id=l> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_2 < / PNUEName > 
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<PNAccessControlList>sip : user2_publicl@homel . com sip : user3_publicl@homel . com 
sip : user4_publicl@homel . com </PNAccessControlList> 

<PNAccessControlType>Cont roller </PNAccessControlType> 
</ControlleeUE> 
<ControlleeUE id=2> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 
< PNUEName > PN_3 < / PNUEName > 

<PNAccessControlList>sip : user5_publicl@homel . com</PNAccessControlList> 
<PNAccessControlType>NonController</PNAccessControlType> 
</ControlleeUE> 
</AccessControl> 
<Nameof PNUE> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 
<UEName id=l> 

<Name > PN_1 < /Name > 
</UEName> 
<UEName id=2> 

<Name > PN_2 < /Name > 
</UEName> 
<UEName id=3> 

<Name > PN_3 < /Name > 
</UEName> 
</NameofPNUE> 
</PNConf iguration> 
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Annex B (normative): 

PNM XML schema definition 

B.1 XIVIL elements structure 

Table B.1-1 below shows the XML elements structure hierarchically. 
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Table B.1-1 : XML elements structure 

PNConfiguration: 
UERedirection: 

Redirected UserlD 

PNUEID 

PNUEName 
RedirectingUserlD id=1 

PNUEID 

PNUEName 

RedirectionLevel 

RedirectionPrio 

RedirectingUserlD id=Q 

PNUEID 

PNUEName 

RedirectionLevel 

RedirectionPrio 
PNERedirection: 

Redirected UserlD 

PNUEID 

PNEID 

PNEName 
RedirectingUserlD id=1 

PNEID 

PNEName 

RedirectionLevel 

RedirectionPrio 

RedirectingUserlD id=Q 

PNEID 

PNEName 

RedirectionLevel 

RedirectionPrio 
AccessControl: 

ControllerUE 

PNUEID 

PNUEName 
ControlleeUE id=1 

PNUEID #1 

PNUEName #1 

PNUEID #N 
PNUEName #N 
PNAccessControlList 
PNAccessControlType 

ControlleeUE id=M 
PNUEID #1 
PNUEName #1 

PNUEID #P 

PNUEName #P 

PNAccessControlList 

PNAccessControlType 
PNE AccessControl: 
ControllerUE 

PNUEID 

PNUEName 
ControlleePNE id=1 

PNEID #1 

PNEName #1 

PNEID #N 
PNEName #N 
PNAccessControlList 
PNAccessControlType 

ControlleePNE id=M 
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PNEID#1 
PNEName#1 

PNEID#P 
PNEName#P 
PNAccessControlList 
PNAccessControlType 

NameofPNUE 

PNUEID (Shared IMPU) 
UEName id=1 
Name 

UEName id=R 
Name 



B.2 XML schema for PNM 



Table B.2-1 contains the XML schema definition for an XML document for the FN configuration and query over the Ut 
interface. 

Table B.2-1 : XML schema for PNM 

<?xml version="l . 0" encoding="UTF-8" ?> 
<xs : schema targetNamespace="uri : 3gpp :pnm" 

xmlns= "uri : 3gpp : pnm" 

xmlns :xs="http: //www.w3 . org/2 01/XMLSchema" 

elementFormDefault=" qualified" attributeFormDefault=" unqualified" > 

<!-- This import brings in the XML language attribute xml:lang--> 
<xs : import namespace="http : //www.w3 .org/XML/1998 /namespace" 
schemaLocation="http : //www.w3 . org/2 01/xml .xsd"/> 

<!-- The PNConf iguration element --> 

<xs: element name=" PNConf iguration" type="pnConf Request "/> 
<xs:element name="PNUEID" type="xs : anyURI"/> 
<xs:element name="PNUEName" type="xs : string" /> 

<!-- The whole PNM PN-conf iguration specific data set --> 
<xs : complexType name="pnConf Request" > 

<xs : sequence minOccurs=" 0" maxOccurs="unbounded" > 
<xs : choice> 

<xs:element name="UERedirection" type="UERedirectionType"/> 
<xs:element name="AccessControl" type="AccessControlType"/> 
<xs:element name =" NameofPNUE" type="PNUENameType"/> 
<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccurs= " unbounded" / > 
</xs : choice> 
</xs : sequence> 
<xs : any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> 

<xs : anyAttribute namespace="##other" processContents="lax" > 
</xs : complexType> 

<!-- The UERedirection data set --> 
<xs : complexType name="UERedirectionType" > 
<xs : sequence> 

<xs:element name="RedirectedUserID" maxOccurs="l" > 
<xs : complexType> 
<xs : sequence> 

<xs:element ref ="pnm: PNUEID"/> 
<xs : element ref =" pnm: PNUEName"/> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccur s = " unbounded " / > 

</xs : sequence> 
<xs : any namespace="##other" processContents="lax" minOccurs=" 0" 
maxOccur s = " unbounded " / > 

</xs : complexType> 

<xs : anyAttribute namespace="##other" processContents="lax" > 
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</xs : element > 

<xs:element name="RedirectingUserID" minOccurs="0" maxOccurs="unbounded" > 
<xs : complexType> 
<xs : sequence> 

<xs: element ref ="pnm: PNUEID"/> 
<xs : element ref ="pnm: PNUEName"/> 

<xs : element name="RedirectionLevel" type="RedirectionLevelType" 
minOccurs= " " / > 

<xs:element name="RedirectionPrio" type="positiveInteger" minOccurs=" 0"/> 
<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccur s = " unbounded " / > 

</xs : sequence> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOc cur s = " unbounded " / > 

<xs : attribute name="id" type="xs ipositivelnteger" use="required"/> 
<xs : anyAttribute namespace="##other" processContents="lax"> 
</xs : complexType> 
</xs : element > 
</xs : sequence> 

<xs : attribute name="UriOfRedirectedUser" type="xs : anyURI" use=" required" /> 
<xs : anyAttribute namespace="##other" processContents="lax" > 
</xs : complexType> 

<!-- The AccessControl data set --> 
<xs : complexType name="AccessControlType" > 
<xs : sequence> 

<xs: element name="ControllerUE" maxOccurs="l" > 
<xs : complexType> 
<xs : sequence> 

<xs:element ref ="pnm: PNUEID"/> 
<xs : element ref ="pnm: PNUEName"/> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccur s = " unbounded " / > 

</xs : sequence> 

<xs : any namespace="##other" processContents="lax" minOccurs=" 0" 
maxOccur s= " unbounded" / > 

<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 
</xs : element> 

<xs:element name="ControlleeUE" minOccurs="0" maxOccurs="unbounded" > 
<xs : complexType> 

<xs : sequence minOccurs="0" maxOccurs="unbounded" > 
<xs:element ref ="pnm: PNUEID"/> 
<xs : element ref ="pnm: PNUEName"/> 

<xs : any namespace="##other" processContents="lax" minOccurs=" 0" 
maxOccur s = " unbounded " / > 

</xs : sequence> 

<xs:element name="PNAccessControlList" type="ACListType" minOccurs=" 0"/> 
<xs:element name="PNAccessControlType" type="ACType" minOccurs="0"/> 
<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccur s = " unbounded " / > 

<xs : attribute name="id" type="xs ipositivelnteger" use=" required" /> 
<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 
</xs : element > 
</xs : sequence> 

<xs : attribute name="UriOf ControllerUE" type="xs : anyUIR" use=" required" /> 
<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 

<!-- The PNUEName data set --> 

<xs : complexType name="PNUENameType" > 

<xs:element ref ="pnm: PNUEID" maxOccurs="l"/> 

<xs : sequence maxOccurs="unbounded" > 

<xs:element name="UEName" type="UENameType"/> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> 

</xs : sequence> 

<xs : any namespace="##other" processContents="lax" minOccurs=" 0" maxOccurs="unbounded"/> 

<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 

<xs : complexType name="UENameType" > 

<xs : sequence maxOccurs="unbounded" > 

<xs:element name="Name" type="xs : string" /> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> 
</xs : sequence> 

<xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> 
<xs : attribute name="id" type="xs ipositivelnteger" use=" required" /> 
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<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 

<!-- The Simple Types --> 

<xs : simpleType name="RedirectionLevelType"> 
<xs : restriction base="xs : string" > 

<xs : enumeration value=" application" /> 
<xs : enumeration value="component"/> 
</xs : restriction> 
</xs : simpleType> 

<xs : simpleType name="RedirectionPrioType" > 

<xs : restriction base="xs ipositivelnteger" > 
<xs : enumeration value="l"/> 
<xs : enumeration value="2"/> 
<xs : enumeration value="3"/> 
</xs : restriction> 
</xs : simpleType> 

<xs : simpleType name="ACListType" > 

<xs:list itemType="xs : string" /> 
</xs : simpleType> 

<xs : simpleType name="ACType" > 

<xs : restriction base="xs : string" > 

<xs : enumeration value="Controller"/> 
<xs : enumeration value="NonController"/> 
</xs : restriction> 
</xs : simpleType> 
</xs : schema> 

NOTE 1: The <xs:any> and <xs:anyAttribute> elements within the complex types allow for compatible standard 
extensions in future releases. 

NOTE 2: This document supports three values of the priority for the <RedirectionPrioType> element (High, 
medium and low). 
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Annex C (normative): 

Definitions of the PNIVI XCAP application usage 

XCAP requires application usage to fulfil a number of steps in the definition of such application usage. The reminder of 
this annex specifies the required definitions of the PNM XCAP application usage. 

Application Unique ID (AUID): Each XCAP application usage is associated with a unique name called the 
Application Unique ID (AUID). The AUID defined by the PNM application usage falls into the vendor-proprietary 
namespace of XCAP AUID, where 3GPP is considered a vendor. 

The AUID allocated to the PNM XCAP apphcation usage is: 

pnm. 3gpp.org 

Default namespace: XCAP requires application usages to declare the default namespace. The default namespace of the 
PNM XCAP apphcation usage is: 

http : //uri . 3gpp . org/params/xml/pnm/xcap 
MIME type: The MIME type of PNM XML documents is: 

application/pnm+xml 

Naming conventions: By default, PNM XML document is stored under the user's Home Directory (which is located 
under the "users" sub-tree). In order to facilitate the manipulation of a PNM XML document, the present document 
defines a default XML file name: 

pnm . xml 
XCAP root URI: The XCAP root defines all contexts in which all XCAP resources defined by the operator (e.g., an 
operator with a domain name of example.com) exist and the corresponding XCAP root URI is: 

xcap . example . com 

XCAP User Identify (XUI): Each user known to the XACP server is associated with a user name, called XCAP User 
Identify (XUI), which is pre-configured at the PN UE. The XUI for PNM can be the shared public user identity used of 
the PN user. 
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